Re: devfs initial permissions

Andreas Jellinghaus (aj@dungeon.inka.de)
Mon, 12 Jan 1998 10:37:54 +0100


>So my system where the device driver provides a default mode,uid,gid
>does everything you want, easily. There's no need to invent new
>permission variable types. It's up to the driver writer to choose
>permissions.

i want to make sure, that these defaults make sence :
a) uid and gid should be always 0, except directly specified via in
insmod parameter. kernel should not dictate user id's ...
b) other permission != 0 should signal : it's safe to allow
anyone to use the device
c) group permission != 0 should signal : it will only give resources,
not compromise system security to allow someone to use the device

a disk driver with a 0660 permission would be horrible wrong.
Documentation/devices.txt is a big help in maintaining an up-to-date
MAKEDEV, but it doesn't tell you what will happen in the worst case,
if someone uses that device ?

for example : look at your own system : what permission do your mouse
devices have ? writing to mouse devices can at least freeze X11.
if you have no way to telnet to your machine ...
someone reported he could do harm the system with writing to /dev/psaux
(see bugtraq report).

what permission did you propose for mouse devices ?

andreas