Messages in this thread | | | Date | Thu, 12 Aug 2004 12:55:16 -0400 | From | Jeff Garzik <> | Subject | Re: SG_IO and security |
| |
Linus Torvalds wrote: > > On Thu, 12 Aug 2004, Linus Torvalds wrote: > >>Hmm.. This still allows the old "junk" commands (SCSI_IOCTL_SEND_COMMAND). > > > Btw, I think the _right_ thing to check is the write access of the file > descriptor. If you have write access to a block device, you can delete the > data, so you might as well be able to do the raw commands. And that would > allow things like "disk" groups etc to work and burn CD's.
Define raw commands. I certainly don't want non-root users to be able to issue FORMAT UNIT on my hard drive.
Jeff
- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| |