On Thu, 31 Aug 2000, Tigran Aivazian wrote:

> Actually, microcode driver checks CAP_SYS_RAWIO only on open() so it
> would allow access to the receiver of fd even he has no CAP_SYS_RAWIO
> privilege. Hmmm, maybe I should put it back into write() method, as
> Linus (or someone else) did at some point (and I removed it)...

Surely that's correct.  Observe that root can send me
an fd to /etc/shadow or /dev/kmem if it so chooses.

Granted, the mtrr and microcode drivers aren't hugely
useful to non-root code, but I see no reason why this
should be a special case.

MAtthew.

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to [EMAIL PROTECTED]
Please read the FAQ at http://www.tux.org/lkml/

Reply via email to