Re: Who wants to test cracklinux??

Marko Euth
2006-04-02T23:07:14Z

On Mon, 03 Apr 2006 00:39:41 +0200
Arjan van de Ven <arjan@infradead.org> wrote:

> On Sun, 2006-04-02 at 15:34 -0700, Ben Ford wrote:
> > -----BEGIN PGP SIGNED MESSAGE-----
> > Hash: SHA1
> >
> > Pavel Machek wrote:
> > > Hi!
> > >> I've written a small kernel module & shared object for kernel 2.6 to
> > >> enable the following for normal users:
> > >>
> > >> - inb()/outb()... via a wrapper function
> > > ioperm() does that already, no? You mean, you enable it for non-root,
> > > too? That's security hole.
> >
> > My OS development classes have a lab of machines that run entirely as
> > root just for these reasons. I think it's valid to allow these
> > operations as non-root in certain situations. It is better than
> > running *everything* as root, no?

Yes, that's exactly what the whole module is meant for.

>
> is there any difference? I mean... if you can outb you for all intents
> and purposes are root anyway ;) (like you can overwrite any memory in
> the system etc etc)
>

Don't you think beeing root is a little bit more
easy than doing everything with outb??? ;))