Date: Thu, 04 Mar 2004 15:08:11 -0700 (MST) From: "M. Warner Losh" <imp@bsdimp.com> To: nate@root.org Cc: cvs-src@FreeBSD.org Subject: Re: cvs commit: src/usr.sbin/acpi/acpiconf acpiconf.c Message-ID: <20040304.150811.124827383.imp@bsdimp.com> In-Reply-To: <20040304100856.Y24532@root.org> References: <20040304170353.64D4F16A4D4@hub.freebsd.org> <20040304100856.Y24532@root.org>
next in thread | previous in thread | raw e-mail | index | archive | help
In message: <20040304100856.Y24532@root.org>
Nate Lawson <nate@root.org> writes:
: I am concerned about this change since being able to open a descriptor
: read-only implies they can do ioctl, which means they can also suspend the
: system. If we have to do this, we might have to go the setgid route
: although I don't necessarily want to deal with the security implications
: of that. Users can get battery status through apm(8) but not battery
: info.
ioctl can be made to require a write open. That's what the apm ioctls
required, except for battery status.
Warner
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20040304.150811.124827383.imp>