Subject: Re: Querying an userland program from the kernel
To: None <tech-kern@NetBSD.org>
From: David Young <dyoung@pobox.com>
List: tech-kern
Date: 01/25/2004 02:01:03
On Sun, Jan 25, 2004 at 12:11:29AM -0500, der Mouse wrote:
> > A generalized "upcall" mechanism whereby the kernel can get help from
> > userland programs would be very nice for a whole pile of problems.
>
> > [U]sing sockets for kernel/userland messages makes a lot of sense.
>
> It does.
Socket interfaces are fine, but they are not convenient to delegate
to unprivileged users. A character device, however, you can "chmod 600
/dev/dev0 ; chown dyoung /dev/dev0". It is also easy to create a dev0
inside a chroot jail. And in anticipation of the day when NetBSD has
capabilities or some other process-granularity system for privileges,
names like /dev/dev0 will serve as convenient and familiar names for
privileges
Dave
--
David Young OJC Technologies
dyoung@ojctech.com Urbana, IL * (217) 278-3933