lkml.org 
[lkml]   [2002]   [Mar]   [11]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    Date
    From
    SubjectRe: [patch] My AMD IDE driver, v2.7


    On Mon, 11 Mar 2002, Jeff Garzik wrote:
    >
    > You have convinced me that unconditional filtering is bad. But I still
    > think people should be provided the option to filter if they so desire.

    Hey, choice is always good, except if it adds complexity.

    The problem with conditional filtering is that either it is a boot (or
    compile time) option, or it is a dynamic filter.

    If its a dynamic filter, and you don't trust root, what _are_ you going to
    trust? The root program you don't trust might as well be turning the
    filtering off because it wants to be "convenient". And since the only
    programs you really want to filter are _exactly_ the kinds of programs
    that want to avoid filtering, you're just hosed.

    That's my real beef with this whole idiotic parsing thing. Either it is
    fixed (bad, if you don't know what the commands are for all disks) or it
    is trivially overcome in the name of "convenience" (equally bad, since it
    makes the whole thing pointless).

    None of these issues really exist in your networking example.

    Trust me, I'm not trying to be difficult, I'm just pointing out the
    fundamental problems of your approach.

    Yeah yeah. You can add additional levels of protection, and we have
    capabilities.

    Add a special password-protected capability, so that only YOU can enable
    certain hardware access stuff. Where does it end? Is one such capability
    enough? How do you initialize the default values for the system if you
    need to be there to type in the password at bootup every time? We're
    talking about some rather fundamental things here, and these are issues
    that go _far_ beyond some silly ATA stack layer.

    Linus

    -
    To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
    the body of a message to majordomo@vger.kernel.org
    More majordomo info at http://vger.kernel.org/majordomo-info.html
    Please read the FAQ at http://www.tux.org/lkml/

    \
     
     \ /
      Last update: 2005-03-22 13:24    [W:4.033 / U:0.048 seconds]
    ©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site