Date: Thu, 4 Mar 2004 14:56:02 -0800 (PST) From: Nate Lawson <nate@root.org> To: "M. Warner Losh" <imp@bsdimp.com> Cc: cvs-src@FreeBSD.org Subject: Re: cvs commit: src/usr.sbin/acpi/acpiconf acpiconf.c Message-ID: <20040304145544.U25845@root.org> In-Reply-To: <20040304.150811.124827383.imp@bsdimp.com> References: <20040304170353.64D4F16A4D4@hub.freebsd.org> <20040304100856.Y24532@root.org> <20040304.150811.124827383.imp@bsdimp.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On Thu, 4 Mar 2004, M. Warner Losh wrote: > In message: <20040304100856.Y24532@root.org> > Nate Lawson <nate@root.org> writes: > : I am concerned about this change since being able to open a descriptor > : read-only implies they can do ioctl, which means they can also suspend the > : system. If we have to do this, we might have to go the setgid route > : although I don't necessarily want to deal with the security implications > : of that. Users can get battery status through apm(8) but not battery > : info. > > ioctl can be made to require a write open. That's what the apm ioctls > required, except for battery status. Good idea. Takawata-san, can you make this change? -Nate
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20040304145544.U25845>