Date: Sun, 4 Feb 2001 11:57:41 +1030 From: Greg Lehey <grog@lemis.com> To: Peter Wemm <peter@netplex.com.au> Cc: Robert Watson <rwatson@FreeBSD.ORG>, freebsd-current@FreeBSD.ORG, freebsd-hackers@FreeBSD.ORG Subject: Re: Watch your devfs permissions in driver make_dev calls Message-ID: <20010204115741.G27504@sydney.worldwide.lemis.com> In-Reply-To: <200102030410.f134AAW35066@mobile.wemm.org>; from peter@netplex.com.au on Fri, Feb 02, 2001 at 08:10:10PM -0800 References: <Pine.NEB.3.96L.1010202144314.30423E-100000@fledge.watson.org> <200102030410.f134AAW35066@mobile.wemm.org>
next in thread | previous in thread | raw e-mail | index | archive | help
On Friday, 2 February 2001 at 20:10:10 -0800, Peter Wemm wrote: > Robert Watson wrote: > >> crw-r--r-- 1 root wheel 78, 0 Dec 31 1969 pci > > This one may appear harmless, but it is not. It is trivially easy to create > an alignment fault (fatal on an alpha) with the userland pciconf tool. > We must not allow this to be used by users until the kernel part is fixed. > > Eg: try this on an alpha: pciconf -r -l pci0:x:x 0x3 - ie: read a longword > at byte offset 3 in configuration space.. kaboom! This looks like a separate issue. Presumably you can do this as root as well. pciconf should check the parameters. Greg -- Finger grog@lemis.com for PGP public key See complete headers for address and phone numbers To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-hackers" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20010204115741.G27504>