Date: Tue, 19 Nov 2002 10:44:02 +0100 From: Poul-Henning Kamp <phk@critter.freebsd.dk> To: Bruce Evans <bde@zeta.org.au> Cc: Tim Robbins <tjr@FreeBSD.ORG>, Kris Kennaway <kris@obsecurity.org>, current@FreeBSD.ORG Subject: Re: Device permissions with DEVFS Message-ID: <17355.1037699042@critter.freebsd.dk> In-Reply-To: Your message of "Tue, 19 Nov 2002 19:01:46 %2B1100." <20021119184410.D29957-100000@gamplex.bde.org>
next in thread | previous in thread | raw e-mail | index | archive | help
In message <20021119184410.D29957-100000@gamplex.bde.org>, Bruce Evans writes: >On Tue, 19 Nov 2002, Tim Robbins wrote: > >> I'm glad you brought this up... I'd like to see /dev/devctl made mode 600 >> instead of 644 because it does not look very robust and because only one >> devctl can be open at a time. >> >> The two other security/reliability bugs I can see are that the async >> (ioctl FIOASYNC) and non-blocking (ioctl FIONBIO) flags are not cleared >> between when one process closes the device and another opens it. Leaving > >Per-device flags for these ioctls are a pet peeve of mine. This is one of the things which are much easier to fix if we move devices from the vnode layer to the fdesc layer. A move which increasingly is pressing its way up my TODO list. -- Poul-Henning Kamp | UNIX since Zilog Zeus 3.20 phk@FreeBSD.ORG | TCP/IP since RFC 956 FreeBSD committer | BSD since 4.3-tahoe Never attribute to malice what can adequately be explained by incompetence. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-current" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?17355.1037699042>