Peter Svensson wrote:
>
> On Fri, 21 Jul 2000 bodnar42@bodnar42.dhs.org wrote:
>
> What it does not do is provide protection against malicious destruction of
> a disk. To destroy the disk you need root before the patch and root after
> the patch and that is it. The recent proliferation of rather complex
> exploits of holes in programs shows that even problems that are hard to
> exploit will be exploited. Using direct io to destroy the
> bios/disk/whatnot with direct io is not beyond their reach I suspect.
Think exporting _protocols_ over a network (protocols lend themselves
for this purpose :-). There are user level programs that redirect the
protocol
to access serial ports over the network. Tomorrow you may find a reason
to do the
same with the protocols that control IDE disks. The issue regarding
being
or not being root on the local machine does not exist here.
I like Andre's perfectionist approach at the protocol level.
Ove
-- Ove Ewerlid Email: Ove.Ewerlid@[syscon|signal|material].uu.se Phone: +46 70 666 23 63, Fax: +46 18 503 611, +46 18 555 096- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.rutgers.edu Please read the FAQ at http://www.tux.org/lkml/
This archive was generated by hypermail 2b29 : Sun Jul 23 2000 - 21:00:15 EST