Re: kern/37986: any user can hog the all cpu with _sched_setparam.

[yamt%mwd.biglobe.ne.jp@localhost (YAMAMOTO Takashi)]

The following reply was made to PR kern/37986; it has been noted by GNATS.

From: yamt%mwd.biglobe.ne.jp@localhost (YAMAMOTO Takashi)
To: elad%NetBSD.org@localhost
Cc: rmind%NetBSD.org@localhost, gnats-bugs%NetBSD.org@localhost
Subject: Re: kern/37986: any user can hog the all cpu with _sched_setparam.
Date: Mon, 11 Feb 2008 19:15:14 +0900 (JST)

 > I'm not sure the compat code is wrong. It seems the policy present
 > there, of checking root and uid matching, is closer to what other OSs
 > seem to do in this regard (I only briefly looked at FreeBSD, Linux,
 > Solaris, and HP-UX).
 
 iirc our compat code doesn't actually change scheduling parameters yet.
 
 i believe these OSes have appropriate permission checks.  (otherwise it's
 their bug, which we should not follow even for compat code.)
 
 YAMAMOTO Takashi