APM security question

Russ Steffen (rsteffen@ia.net)
Tue, 13 Oct 1998 23:14:04 -0700


I'm curious about a little segment of the APM code:

in do_ioctl:

if (!as->suser)
return -EPERM;

This means that only root can issue to the ioctl to suspend the machine.
That seems odd, since it overrides the file permissions on the character
device. I don't like the idea that any APM-aware program has to be suid-root
to suspend the machine, I'd rather be able to select who can and can't
twiddle with APM suspend using the permissions on /dev/apm_bios.

Russ

-- 
----------------------------------
Russ Steffen
rsteffen@ia.net

- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.rutgers.edu Please read the FAQ at http://www.tux.org/lkml/