From owner-freebsd-current Tue Jul 7 04:01:39 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id EAA08241 for freebsd-current-outgoing; Tue, 7 Jul 1998 04:01:39 -0700 (PDT) (envelope-from owner-freebsd-current@FreeBSD.ORG) Received: from indigo.ie (nsmart@ts01-53.waterford.indigo.ie [194.125.139.116]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id EAA08231 for ; Tue, 7 Jul 1998 04:01:34 -0700 (PDT) (envelope-from rotel@indigo.ie) Received: (from nsmart@localhost) by indigo.ie (8.8.8/8.8.7) id LAA00722; Tue, 7 Jul 1998 11:56:22 +0100 (IST) (envelope-from rotel@indigo.ie) From: Niall Smart Message-Id: <199807071056.LAA00722@indigo.ie> Date: Tue, 7 Jul 1998 11:56:21 +0000 In-Reply-To: "Jordan K. Hubbard" "Re: xf86OpenConsole: KDENABIO failed (Operation not permitted)" (Jul 6, 10:17pm) Reply-To: rotel@indigo.ie X-Mailer: Mail User's Shell (7.2.6 beta(3) 11/17/96) To: "Jordan K. Hubbard" , joelh@gnu.org Subject: Re: xf86OpenConsole: KDENABIO failed (Operation not permitted) Cc: smoergrd@oslo.geco-prakla.slb.com, tarkhil@asteroid.svib.ru, current@FreeBSD.ORG Sender: owner-freebsd-current@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG On Jul 6, 10:17pm, "Jordan K. Hubbard" wrote: } Subject: Re: xf86OpenConsole: KDENABIO failed (Operation not permitted) > > While I will agree that it does not run in a normal manner, it is not > > an infrequent operation. > > Erm, fine. So come up with an access method for X that doesn't > require this kind of security bypassing and I'm sure that everyone > will be quite pleased with you. :-) It's not unreasonable to let X do its thing, on any secure system all of X will be gid consoleusers mode 750 anyway. Afaik you can let it do what it needs to do using iopl or a i/o port privilege map, the trick is authenticating X, perhaps a sysctl which is only settable in secure level < 0 which specifies which binaries get iopl permissions when running as root would do the trick, then again, perhaps someone has a better idea. Niall -- Niall Smart. PGP: finger njs3@motmot.doc.ic.ac.uk FreeBSD: Turning PC's into Workstations: www.freebsd.org To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-current" in the body of the message