From owner-freebsd-stable@FreeBSD.ORG  Fri Feb 16 20:07:30 2007
Return-Path: <owner-freebsd-stable@FreeBSD.ORG>
X-Original-To: freebsd-stable@freebsd.org
Delivered-To: freebsd-stable@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52])
	by hub.freebsd.org (Postfix) with ESMTP id 6C47D16A402
	for <freebsd-stable@freebsd.org>; Fri, 16 Feb 2007 20:07:30 +0000 (UTC)
	(envelope-from nicolas@i.0x5.de)
Received: from n.0x5.de (n.0x5.de [217.197.85.144])
	by mx1.freebsd.org (Postfix) with ESMTP id 11F3113C4A8
	for <freebsd-stable@freebsd.org>; Fri, 16 Feb 2007 20:07:30 +0000 (UTC)
	(envelope-from nicolas@i.0x5.de)
Received: by pc5.i.0x5.de (Postfix, from userid 1003)
	id D7CD261C1D; Fri, 16 Feb 2007 20:48:10 +0100 (CET)
Date: Fri, 16 Feb 2007 20:48:10 +0100
From: Nicolas Rachinsky <fbsd-stable-0@ml.turing-complete.org>
To: freebsd-stable@freebsd.org
Message-ID: <20070216194810.GA47479@mid.pc5.i.0x5.de>
Mail-Followup-To: freebsd-stable@freebsd.org
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
X-Powered-by: FreeBSD
X-Homepage: http://www.rachinsky.de
X-PGP-Keyid: 887BAE72
X-PGP-Fingerprint: 039E 9433 115F BC5F F88D  4524 5092 45C4 887B AE72
X-PGP-Keys: http://www.rachinsky.de/nicolas/gpg/nicolas_rachinsky.asc
User-Agent: Mutt/1.5.13 (2006-08-11)
Subject: security issues of aio
X-BeenThere: freebsd-stable@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Production branch of FreeBSD source code <freebsd-stable.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-stable>, 
	<mailto:freebsd-stable-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-stable>
List-Post: <mailto:freebsd-stable@freebsd.org>
List-Help: <mailto:freebsd-stable-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-stable>,
	<mailto:freebsd-stable-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Fri, 16 Feb 2007 20:07:30 -0000

Hallo,

in /sys/conf/NOTES there is a comment
| # Use real implementations of the aio_* system calls.  There are numerous
| # stability and security issues in the current aio code that make it
| # unsuitable for inclusion on machines with untrusted local users.
| options         VFS_AIO

Are there still problems with aio?

I only found http://xforce.iss.net/xforce/xfdb/7693, but no
advisory or other hint that this was fixed (I think I must have missed
that somehow). And some closed PRs about fixed problems.

Do these affect aio.ko as well?

Thanks,
Nicolas

-- 
http://www.rachinsky.de/nicolas