lkml.org 
[lkml]   [2013]   [May]   [23]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
From
Subject[PATCH v3 part3 0/7] Customize the SG_IO whitelist for different device classes
Date
The last problem in the SG_IO whitelist is that because the bitmap
of allowed commands is designed for MMC devices only, some commands
are missing even though they are generally useful and not insecure.
At least, they are not more insecure than anything else you can do
if you have access to /dev/sdX or /dev/stX nodes.

In particular, the whitelist is hardly usable for tapes; and in the
case of virtualization, the few missing commands for disks may cause
guests to log errors.

Paolo

Paolo Bonzini (7):
sg_io: complete transition to per-class lists of allowed commands
sg_io: create separate entries for conflicting commands
sg_io: cleanup and complete whitelist for rare device types
sg_io: whitelist another command for multimedia devices
sg_io: cleanup and complete whitelist for media changers
sg_io: cleanup and complete whitelist for tapes
sg_io: cleanup and complete whitelist for disks

block/scsi_ioctl.c | 309 ++++++++++++++++++++++++++++++++++------------------
include/scsi/scsi.h | 3 +
2 files changed, 206 insertions(+), 106 deletions(-)

--
1.8.1.4



\
 
 \ /
  Last update: 2013-05-23 16:42    [W:0.032 / U:0.036 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site