From: Thomas Hood <jdthood@mail.com>
To: linux-kernel@vger.kernel.org
Subject: Re: apm suspend broken ?
Date: 30 Oct 2001 11:18:17 -0500 [thread overview]
Message-ID: <1004458698.4243.118.camel@thanatos> (raw)
I have a question related to this.
If a driver ioctl handler requires
(filp->f_mode) & FMODE_WRITE
to be set before processing a request, and if only
root has write permission to the device file, does this
make it unnecessary to check for
capable(CAP_SYS_ADMIN)
?
If we were to use the write permission bit to control
access, then it would not be necessary for the apm
command to be setuid root to give the non-root user
the ability to suspend the machine. Instead we could
chgrp apm /dev/apm_bios
chmod g+w /dev/apm_bios
and add the trusted user to the 'apm' group.
Am I missing something here?
--
Thomas
next reply other threads:[~2001-10-30 16:18 UTC|newest]
Thread overview: 17+ messages / expand[flat|nested] mbox.gz Atom feed top
2001-10-30 16:18 Thomas Hood [this message]
2001-10-31 14:28 ` apm suspend broken ? Stephen Rothwell
-- strict thread matches above, loose matches on Subject: below --
2001-11-29 19:59 Thomas Hood
2001-11-02 12:38 Thomas Hood
2001-10-31 4:05 Thomas Hood
2001-10-30 16:04 Thomas Hood
2001-10-30 15:58 Thomas Hood
2001-10-30 10:55 Pascal Lengard
2001-10-30 11:43 ` Samuli Suonpaa
2001-10-30 12:10 ` Alan Cox
2001-10-31 1:27 ` Pascal Lengard
2001-10-31 11:08 ` Alan Cox
2001-10-31 14:51 ` Stephen Rothwell
2001-11-02 8:31 ` Pascal Lengard
2001-11-29 18:50 ` Pascal Lengard
2001-11-15 17:43 ` Samuli Suonpaa
2001-11-15 17:58 ` Alan Cox
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=1004458698.4243.118.camel@thanatos \
--to=jdthood@mail.com \
--cc=linux-kernel@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.