Subject: Re: How kauth can make meaningful decisions about passthru ioctls
To: None <tls@rek.tjls.com>
From: Elad Efrat <elad@NetBSD.org>
List: tech-security
Date: 11/30/2006 15:10:25
Thor Lancelot Simon wrote:

> Sure.  We're concerned about what the ioctl being passed-through could
> cause the device to do.  Think about what amr(4) would have to do if
> it didn't know how to parse the sub-commands: it'd have to tell the
> listener "it could be any of these: ..." .
> 
> We could, I suppose, order the commands from "safest" to "most dangerous"
> and require that the question indicate the "most dangerous".  But what's
> "more dangerous", writing the device data or writing the device
> configuration?  I think a similar issue exists even for read.

sounds logical. unless someone objects, I'll come up with a diff.

-e.

-- 
Elad Efrat