Messages in this thread | | | Date | Thu, 5 Aug 2004 19:46:20 +0200 | From | Jens Axboe <> | Subject | Re: ide-cd problems |
| |
On Thu, Aug 05 2004, Alan Cox wrote: > On Mer, 2004-08-04 at 06:01, Jens Axboe wrote: > > Absolutely not. I've already outlined why in my previous mails I don't > > want to see anything like this, and this patch is even worse than > > filtering. Additionally, you risk breaking existing programs. > > Existing broken programs. > > Once you do filtering so you don't need CAP_SYS_RAWIO to lob some > commands at a device that becomes the place to enforce sensible policies > because the filter knows what is "read" and what is "write" so it can do > different checks for say "eject" (read) "write" (write) and "erase > firmware" (raw I/O)
Alan, there will be _no_ filtering.
-- Jens Axboe
- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| |