lkml.org 
[lkml]   [2004]   [Aug]   [7]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
SubjectRe: ide-cd problems
From
Date
On Gwe, 2004-08-06 at 15:32, Jens Axboe wrote:
> That's the case I don't agree with, and why I didn't like the idea
> originally. That suddenly requires a patching of the kernel because of
> new commands in new devices. Like when dvd readers became common, you
> can't just require people to update their kernel because a few new
> commands are needed to drive them from user space.

I'm stunning we are even having this argument. You are talking about
what appes to be a hardware destruction enabling security level bug in
the 2.6 kernel and arguing about whether it is a feature or not.

In essence you are saying read access to any raw device node entitles
the opener of the file to destroy the attached device (device even not
just media). You are arguing that its ok that I can use raw scsi I/O to
subvert the read/write permissions too.

In the example code I gave

> default:
> if(capable(CAP_SYS_RAWIO))
> /* Only administrators get to do arbitary things
*/
>

means there is no need to recompile anything, you just need priviledges
to do stuff the kernel doesn't *know* is safe. This is the correct
behaviour for people who don't live in cloud cuckoo land.

Alan

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/

\
 
 \ /
  Last update: 2005-03-22 14:05    [W:0.074 / U:17.148 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site