Date: Mon, 16 Jun 2008 22:27:40 +0400 From: Stanislav Sedov <stas@FreeBSD.org> To: "Rui Paulo" <rpaulo@FreeBSD.org> Cc: current@freebsd.org, Peter Jeremy <peterjeremy@optushome.com.au>, Stanislav Sedov <stas@freebsd.org>, Poul-Henning Kamp <phk@phk.freebsd.dk>, kib@freebsd.org, Coleman Kane <cokane@freebsd.org> Subject: Re: cpuctl(formely devcpu) patch test request Message-ID: <20080616222740.5cdd9490.stas@FreeBSD.org> In-Reply-To: <e1309ba60806161110x5f774fcdic2f5c7b2e7bcb83e@mail.gmail.com> References: <20080606020927.8d6675e1.stas@FreeBSD.org> <10261.1212703949@critter.freebsd.dk> <20080606025533.8322ee08.stas@FreeBSD.org> <1212758604.1904.33.camel@localhost> <20080615230250.7f3efae4.stas@FreeBSD.org> <1213557999.1816.15.camel@localhost> <20080616204433.48ad9879.stas@FreeBSD.org> <e1309ba60806161110x5f774fcdic2f5c7b2e7bcb83e@mail.gmail.com>
next in thread | previous in thread | raw e-mail | index | archive | help
--Signature=_Mon__16_Jun_2008_22_27_40_+0400_=f56UvvDmM6tqN.c Content-Type: text/plain; charset=US-ASCII Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Mon, 16 Jun 2008 19:10:17 +0100 "Rui Paulo" <rpaulo@FreeBSD.org> mentioned: > There's no security issue here. > If the system administrator is concerned about "security" of cpuctl, > he/she just has to compile-out cpuctl or remove the module from the > file system. >=20 Well, in this case it would be possible to load that again. Setting a non-zero securelevel or implementing a specific MAC policy might be a more correct solution. cpuctl(4) won't allow any MSR operations if securelevel is above zero. --=20 Stanislav Sedov ST4096-RIPE --Signature=_Mon__16_Jun_2008_22_27_40_+0400_=f56UvvDmM6tqN.c Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.9 (FreeBSD) iEYEARECAAYFAkhWsKIACgkQK/VZk+smlYE/XACffS6jU6DlpUwZw4H9WH4sh5g+ CSwAn2jrP1CRu93u6kWydRZ2sa/ZZqac =88k8 -----END PGP SIGNATURE----- --Signature=_Mon__16_Jun_2008_22_27_40_+0400_=f56UvvDmM6tqN.c--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20080616222740.5cdd9490.stas>