Date: Sun, 11 Aug 1996 16:25:26 +1000 (EST) From: David Dawes <dawes@rf900.physics.usyd.edu.au> To: bde@zeta.org.au (Bruce Evans) Cc: hackers@freebsd.org Subject: Re: kern_mib.c:int securelevel = -1; Message-ID: <199608110625.QAA18341@rf900.physics.usyd.edu.au> In-Reply-To: <199608102005.GAA07178@godzilla.zeta.org.au> from "Bruce Evans" at Aug 11, 96 06:05:04 am
next in thread | previous in thread | raw e-mail | index | archive | help
>>> Have you tried it? :-) X works fine even at securelevel 2. > >>I haven't tried it, but i think at doesn't work if you've got a > >I tried an S3-868. > >>graphics device where the Xserver wants to access the linear >>framebuffer via /dev/mem. At least, i remember vaguely the term > >That certainly won't work. The Xserver would be using the VGA 64k area in this case -- check the startup output and see what it says. This isn't an option for some non-S3 chips. >>``NetBSD aperture driver'' and the stated reason that this was >>intended to be a backdoor in order to circumvent the /dev/mem >>problem. > >I thought it was to circumvent the /dev/io problem. It is for accessing the linear framebuffer. That's why it is called "aperture" driver. Here is a short decription of it: This driver works like the standard /dev/mem driver. It just allows mapping of the VGA framebuffer even if kernel security level is > 0. The driver only implements the open(), close() and mmap() calls. In order not to defeat kernel security, only one open() at a time is allowed and only a process with effective user id of 0 can perform it. So while you're running XFree86, no other process will be allowed to open /dev/xf86. I don't agree with the implication there that it doesn't allow kernel security to be defeated though. >>Plain (banked) VGA probably works, since it only needs to mmap() the >>standard frame buffer where syscons or pcvt do already know about its >>location. > >This mapping should be provided by the driver in all cases. It's It should be easy to provide this for PCI cards, but perhaps not so easy for VLB cards without chipset-specific code in the console driver. David
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199608110625.QAA18341>