Re: ide-cd problems

[Alan Cox]

On Mer, 2004-08-04 at 06:01, Jens Axboe wrote:
> Absolutely not. I've already outlined why in my previous mails I don't
> want to see anything like this, and this patch is even worse than
> filtering. Additionally, you risk breaking existing programs.

Existing broken programs. 

Once you do filtering so you don't need CAP_SYS_RAWIO to lob some
commands at a device that becomes the place to enforce sensible policies
because the filter knows what is "read" and what is "write" so it can do
different checks for say "eject" (read) "write" (write) and "erase
firmware" (raw I/O)

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/