In <397B727A.80C76B13@monmouth.com> Willem Riede (wriede@monmouth.com) wrote:
> Khimenko Victor wrote:
>>
>> In <Pine.LNX.4.10.10007230237430.6884-100000@dax.joh.cam.ac.uk> James Sutherland (jas88@cam.ac.uk) wrote:
>> JS> On Sun, 23 Jul 2000, Khimenko Victor wrote:
>> >>
>> >>
>> >> How so ? You are not using XFree86, right ? Then you can remove CAP_SYS_RAW
>> >> from system and be happy.
>>
>> JS> So it has gone. That's my point.
>>
>> You can do this on your router and perhaps even on your web-server. You can not
>> do this on desktop workstation. Not while such access is needed by XFree86.
>>
> So maybe we should split that capability and have CAP_SYS_RAW_GRAPHICS?
The whole problem is that there are NO reliable way to know which parts are
needed by XFree86 (except to ask XFree86th driver but then what's the point:
cracker will just give you hacked XFree86th driver).
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.tux.org/lkml/
This archive was generated by hypermail 2b29 : Mon Jul 31 2000 - 21:00:16 EST