On Wed, Apr 21, 2010 at 11:29:11AM -0700, Kees Cook wrote:> I would opt for greater transparency for the admin, and leave it 644 and> instead more carefully check CAP_SYS_RAWIO.> > Signed-off-by: Kees Cook <kees.cook@canonical.com>fine with me.