Subject: Re: kern/35821: /dev/mem is not readable any more
To: None <kern-bug-people@netbsd.org, gnats-admin@netbsd.org,>
From: Elad Efrat <elad@bsd.org.il>
List: netbsd-bugs
Date: 02/24/2007 23:10:02
The following reply was made to PR kern/35821; it has been noted by GNATS.

From: Elad Efrat <elad@bsd.org.il>
To: gnats-bugs@NetBSD.org
Cc: 
Subject: Re: kern/35821: /dev/mem is not readable any more
Date: Sun, 25 Feb 2007 01:09:05 +0200

 when did it (=acpidump thing) work with securelevel > 0? and did you try
 with securelevel <= 0?
 
 -e.
 
 martin@duskware.de wrote:
 >> Number:         35821
 >> Category:       kern
 >> Synopsis:       /dev/mem is not readable any more
 >> Confidential:   no
 >> Severity:       serious
 >> Priority:       high
 >> Responsible:    kern-bug-people
 >> State:          open
 >> Class:          sw-bug
 >> Submitter-Id:   net
 >> Arrival-Date:   Sat Feb 24 01:05:00 +0000 2007
 >> Originator:     Martin Husemann
 >> Release:        NetBSD 4.99.12
 >> Organization:
 >> Environment:
 > System: NetBSD night-porter.duskware.de 4.99.12 NetBSD 4.99.12 (PORTER) #2: Thu Feb 22 18:58:55 CET 2007 martin@night-porter.duskware.de:/usr/src/sys/arch/i386/compile/PORTER i386
 > Architecture: i386
 > Machine: i386
 >> Description:
 > 
 > At securelevel > 0 - aka:
 > 
 > security.models.bsd44.name = Traditional NetBSD (4.4BSD)
 > security.models.bsd44.securelevel = 1
 > security.models.bsd44.curtain = 0
 > 
 > /dev/mem is not readable any more. It can be openend readonly, but any
 > attempts to read from it fail with EPERM.
 > 
 >> How-To-Repeat:
 > On i386, just run acpidump(8) after checking the securelevel. It will be
 > unable to find any ACPI tables.
 > 
 >> Fix:
 > n/a
 > 
 >