Re: kern/37986: any user can hog the all cpu with _sched_setparam.

[Elad Efrat <elad%NetBSD.org@localhost>]

The following reply was made to PR kern/37986; it has been noted by GNATS.

From: Elad Efrat <elad%NetBSD.org@localhost>
To: YAMAMOTO Takashi <yamt%mwd.biglobe.ne.jp@localhost>
Cc: rmind%NetBSD.org@localhost, gnats-bugs%NetBSD.org@localhost
Subject: Re: kern/37986: any user can hog the all cpu with _sched_setparam.
Date: Mon, 11 Feb 2008 13:41:54 +0200

 YAMAMOTO Takashi wrote:
 >> I'm not sure the compat code is wrong. It seems the policy present
 >> there, of checking root and uid matching, is closer to what other OSs
 >> seem to do in this regard (I only briefly looked at FreeBSD, Linux,
 >> Solaris, and HP-UX).
 > 
 > iirc our compat code doesn't actually change scheduling parameters yet.
 > 
 > i believe these OSes have appropriate permission checks.  (otherwise it's
 > their bug, which we should not follow even for compat code.)
 
 Yes, they do, and like I said, it's not "only root can do it"...
 
 -e.