Re: ide-cd problems

From: Charles Cazabon
Date: Fri Aug 06 2004 - 10:09:00 EST


Jens Axboe <axboe@xxxxxxx> wrote:
> On Fri, Aug 06 2004, Alan Cox wrote:
> > default:
> > if(capable(CAP_SYS_RAWIO))
> > /* Only administrators get to do arbitary things */
>
> That's the case I don't agree with, and why I didn't like the idea
> originally. That suddenly requires a patching of the kernel because of
> new commands in new devices. Like when dvd readers became common, you
> can't just require people to update their kernel because a few new
> commands are needed to drive them from user space.

The problem is that what if one of the new commands is IGNITE_PLATTER?
Unknown commands can do anything, are therefore extremely dangerous, and
should be restricted.

Charles
--
-----------------------------------------------------------------------
Charles Cazabon <linux@xxxxxxxxxxxxxxxxxxxx>
GPL'ed software available at: http://www.qcc.ca/~charlesc/software/
-----------------------------------------------------------------------
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/