From owner-freebsd-hackers Sat Feb 3 21:19: 7 2001 Delivered-To: freebsd-hackers@freebsd.org Received: from sydney.worldwide.lemis.com (unknown [192.109.197.194]) by hub.freebsd.org (Postfix) with ESMTP id E173737B491; Sat, 3 Feb 2001 21:18:44 -0800 (PST) Received: (from grog@localhost) by sydney.worldwide.lemis.com (8.11.1/8.9.3) id f141Rfe27754; Sun, 4 Feb 2001 12:27:41 +1100 (EST) (envelope-from grog) Date: Sun, 4 Feb 2001 11:57:41 +1030 From: Greg Lehey To: Peter Wemm Cc: Robert Watson , freebsd-current@FreeBSD.ORG, freebsd-hackers@FreeBSD.ORG Subject: Re: Watch your devfs permissions in driver make_dev calls Message-ID: <20010204115741.G27504@sydney.worldwide.lemis.com> References: <200102030410.f134AAW35066@mobile.wemm.org> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Mailer: Mutt 1.0i In-Reply-To: <200102030410.f134AAW35066@mobile.wemm.org>; from peter@netplex.com.au on Fri, Feb 02, 2001 at 08:10:10PM -0800 Organization: LEMIS, PO Box 460, Echunga SA 5153, Australia Phone: +61-8-8388-8286 Fax: +61-8-8388-8725 Mobile: +61-418-838-708 WWW-Home-Page: http://www.lemis.com/~grog X-PGP-Fingerprint: 6B 7B C3 8C 61 CD 54 AF 13 24 52 F8 6D A4 95 EF Sender: owner-freebsd-hackers@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG On Friday, 2 February 2001 at 20:10:10 -0800, Peter Wemm wrote: > Robert Watson wrote: > >> crw-r--r-- 1 root wheel 78, 0 Dec 31 1969 pci > > This one may appear harmless, but it is not. It is trivially easy to create > an alignment fault (fatal on an alpha) with the userland pciconf tool. > We must not allow this to be used by users until the kernel part is fixed. > > Eg: try this on an alpha: pciconf -r -l pci0:x:x 0x3 - ie: read a longword > at byte offset 3 in configuration space.. kaboom! This looks like a separate issue. Presumably you can do this as root as well. pciconf should check the parameters. Greg -- Finger grog@lemis.com for PGP public key See complete headers for address and phone numbers To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-hackers" in the body of the message