Messages in this thread | | | Date | Fri, 6 Aug 2004 17:13:10 +0200 | From | Jens Axboe <> | Subject | Re: ide-cd problems |
| |
On Fri, Aug 06 2004, Charles Cazabon wrote: > Jens Axboe <axboe@suse.de> wrote: > > On Fri, Aug 06 2004, Alan Cox wrote: > > > default: > > > if(capable(CAP_SYS_RAWIO)) > > > /* Only administrators get to do arbitary things */ > > > > That's the case I don't agree with, and why I didn't like the idea > > originally. That suddenly requires a patching of the kernel because of > > new commands in new devices. Like when dvd readers became common, you > > can't just require people to update their kernel because a few new > > commands are needed to drive them from user space. > > The problem is that what if one of the new commands is IGNITE_PLATTER? > Unknown commands can do anything, are therefore extremely dangerous, > and should be restricted.
Well yes, that's exactly why there is a discussion. As I have written before, filtering cannot be perfect exactly because of this. Either you leave unknown commands unfiltered (and risk a problem with new commands until you update your kernels), or you add the _policy_ to filter unknown commands and risk not working with new devices for no good reason.
And if you really want to try and cover everything, you want to add filtering tables per _device_. Which is basically impossible to do, and is completely unmaintainable.
But I've already stated that before.
-- Jens Axboe
- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| |