Re: Bugs in sysctl.c

Mike Shaver (shaver@neon.ingenia.ca)
Mon, 11 Aug 1997 09:04:36 -0400 (EDT)


Thus spake Chris Evans:
> Furthermore, and more worrying, it seems that do_securelevel_strategy is
> NOT called upon modification of securelevel. This means that root can
> arbitrarily lower the securelevel value(!).

Modifications of sysctl values through the /proc interface doesn't
invoke the strategy routines. This is actually a long-standing bug,
and it would be very cool if you'd fix it.

In order to do so, though, you'll probably want to rewrite most of the
sysctl subsystem to have both sysctl(3) and /proc/sys accesses go
through different marshalling procedures and then a common
value-manipulation system.

The scale of that undertaking and my perpetual lack of time kept me
from doing just that when I first noticed the problem last April.

Mike

-- 
#> Mike Shaver (shaver@ingenia.com) Ingenia Communications Corporation 
#>              Linux: because every cycle counts.
#>
#> "I don't know what you do for a living[...]" -- perry@piermont.com
#>        "I change the world." -- davem@caip.rutgers.edu