Re: disk-destroyer.c

From: Vojtech Pavlik (vojtech@suse.cz)
Date: Sat Jul 22 2000 - 05:42:09 EST


On Sat, Jul 22, 2000 at 11:10:57AM +0100, Anton Ivanov wrote:

> And on the topic of root/moot/etc every third if not every second workstation
> installation out there has some of the hdXX or sdXX with permissions that
> alllow non-root to mess with them. Reasons are numerous - CR rippers, CD
> writers, CD players, etc...
> First: you can blow up you firmware on CD devices as well. Happily. Quite a
> lot of them support flashing and firmware updates.
> Second: All the above programs do what? Execute tons of ioctls... and/or mess
> at low level. So if they blow up and pass bogus data before dying miserably...
> So if the kernel can check some stuff with no serious performance penalty it
> should do so.

Note that the ioctls in quiestion - those that are potentially dangerous
- do check for CAP_SYS_ADMIN, and thus you really have to *be* root, not
just have permissions to write to the device.

-- 
Vojtech Pavlik
SuSE Labs

- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.rutgers.edu Please read the FAQ at http://www.tux.org/lkml/



This archive was generated by hypermail 2b29 : Sun Jul 23 2000 - 21:00:18 EST