Date: Wed, 02 Oct 2002 07:12:37 +0200 From: Poul-Henning Kamp <phk@critter.freebsd.dk> To: Bruce Evans <bde@zeta.org.au> Cc: Brooks Davis <brooks@one-eyed-alien.net>, current@FreeBSD.ORG Subject: Re: HEADSUP! GEOM as default in 5 days... Message-ID: <46929.1033535557@critter.freebsd.dk> In-Reply-To: Your message of "Wed, 02 Oct 2002 12:42:45 %2B1000." <20021002122851.K3584-100000@gamplex.bde.org>
next in thread | previous in thread | raw e-mail | index | archive | help
In message <20021002122851.K3584-100000@gamplex.bde.org>, Bruce Evans writes: >On Tue, 1 Oct 2002, Brooks Davis wrote: > >> I just added options GEOM on a kernel from yesterday and noticed today >> that Amanda failed to dump my disks overnight. The problem is that the >> entries in /dev have the wrong permissions. They should be readable by >> group operator, but here's what I have: >> >> [12:03pm] brooks@minya (/usr/src): ll /dev/ad* >> crw------- 1 root wheel 4, 0 Sep 30 16:10 /dev/ad0 > >One reason I have no confidence in devfs is that its quality is such as >to get things like this wrong. There are magic ownerships and permissions >in the source code for N drivers where they are hard to audit. > >The acd driver still uses the insecure mode 0644 despite this being >reported a few years ago. World readability is especially insecure >for acd since it gives some write access via some ioctls. E.g., >everyone has permission to erase writable media. This is _not_ a DEVFS issue, this is a device driver issue. -- Poul-Henning Kamp | UNIX since Zilog Zeus 3.20 phk@FreeBSD.ORG | TCP/IP since RFC 956 FreeBSD committer | BSD since 4.3-tahoe Never attribute to malice what can adequately be explained by incompetence. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-current" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?46929.1033535557>