Re: [PATCH-NEW] allow root to modify raw scsi command permissionslist

From: Alan Cox
Date: Wed Sep 15 2004 - 18:37:45 EST


On Iau, 2004-09-16 at 00:03, Peter Jones wrote:
> > You need to check for capable(CAP_SYS_RAWIO) otherwise you elevate
> > anyone with access bypass capabilities to CAP_SYS_RAWIO equivalent
> > powers.
>
> Do you mean in the ->store path?

Thats the one - otherwise you can add commands without the ability you'd
normally have to bypass

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/