Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 30 Aug 2013 18:13:57 +0100
From:      Jase Thew <jase@FreeBSD.org>
To:        Jamie Gritton <jamie@FreeBSD.org>
Cc:        svn-src-head@freebsd.org, svn-src-all@freebsd.org, src-committers@freebsd.org
Subject:   Re: svn commit: r252841 - in head/sys: dev/mem kern sys
Message-ID:  <5220D2D5.6030105@FreeBSD.org>
In-Reply-To: <201307052131.r65LVGKr089550@svn.freebsd.org>
References:  <201307052131.r65LVGKr089550@svn.freebsd.org>

next in thread | previous in thread | raw e-mail | index | archive | help
On 05/07/2013 22:31, Jamie Gritton wrote:
> Author: jamie
> Date: Fri Jul  5 21:31:16 2013
> New Revision: 252841
> URL: http://svnweb.freebsd.org/changeset/base/252841
>
> Log:
>    Add new privileges, PRIV_KMEM_READ and PRIV_KMEM_WRITE, used in opening
>    /dev/kmem and /dev/mem (in addition to traditional file permission checks).
>    PRIV_KMEM_READ is different from other PRIV_* checks in that it's allowed
>    by default.
>
>    Reviewed by:	kib, mckusick
>

Hi Jamie,

As a result of this commit (and r252845), it is no longer possible to 
access /dev/mem and /dev/kmem inside of a jail - is this behaviour 
intentional?

# dd if=/dev/mem bs=64 count=1
dd: /dev/mem: Operation not permitted

Regards,

Jase.

-- 
Jase Thew
jase@FreeBSD.org
FreeBSD Ports Committer




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?5220D2D5.6030105>