Messages in this thread | | | Date | Wed, 12 Sep 2012 10:18:22 +0200 | From | Paolo Bonzini <> | Subject | Re: [PATCH] sg_io: allow UNMAP and WRITE SAME without CAP_SYS_RAWIO |
| |
Il 12/09/2012 10:05, James Bottomley ha scritto: > This is why the whole filter thing was mutable via sysfs. That way the > admin could set this up per device. It sounds like this is what you > want to fix, rather than opening up more holes in an already leaky > security apparatus.
It is, thanks for the useful history lesson!
Paolo
| |