Re: ide-cd problems

[Jens Axboe <axboe@suse.de>]

On Fri, Aug 06 2004, Jason L Tibbitts III wrote:
> >>>>> "JA" == Jens Axboe <axboe@suse.de> writes:
> 
> JA> Like when dvd readers became common, you can't just require people
> JA> to update their kernel because a few new commands are needed to
> JA> drive them from user space.
> 
> Perhaps I'm being completely dense, but why would the filtering tables
> have to be compiled into the kernel?  Why not load them from user
> space via a mechanism requiring CAP_SYS_RAWIO?
> 
> How many commands are we talking about here?  Is the mechanism
> workable by a simple bitmask, or is something more complex like a
> state machine required?

Could be done, it's quite some work though. The complexity isn't as much
due to new commands being added (that doesn't happen very often), that's
only problematic from the policy pov. The problem is defining the
tables, it's definitely not trivial. And I still claim not very doable.

-- 
Jens Axboe