Re: SG_IO and security

Alan Cox
2004-08-14T16:36:21Z

On Sad, 2004-08-14 at 08:22, Kai Makisara wrote:
> > Though in general I think command-based filtering is not scalable... at
> > the very least I would prefer a list loaded from userspace at boot.
> >
> I think always requiring CAP_RAWIO would be the approach of least
> surprise.

Sounds like an excuse for Al to get yet another file system into the
kernel so you can edit filter rules 8)

Alan