In message <[EMAIL PROTECTED]>, Bruce Evans writes: >On Tue, 1 Oct 2002, Brooks Davis wrote: > >> I just added options GEOM on a kernel from yesterday and noticed today >> that Amanda failed to dump my disks overnight. The problem is that the >> entries in /dev have the wrong permissions. They should be readable by >> group operator, but here's what I have: >> >> [12:03pm] brooks@minya (/usr/src): ll /dev/ad* >> crw------- 1 root wheel 4, 0 Sep 30 16:10 /dev/ad0 > >One reason I have no confidence in devfs is that its quality is such as >to get things like this wrong. There are magic ownerships and permissions >in the source code for N drivers where they are hard to audit. > >The acd driver still uses the insecure mode 0644 despite this being >reported a few years ago. World readability is especially insecure >for acd since it gives some write access via some ioctls. E.g., >everyone has permission to erase writable media.
This is _not_ a DEVFS issue, this is a device driver issue. -- Poul-Henning Kamp | UNIX since Zilog Zeus 3.20 [EMAIL PROTECTED] | TCP/IP since RFC 956 FreeBSD committer | BSD since 4.3-tahoe Never attribute to malice what can adequately be explained by incompetence. To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-current" in the body of the message
