Re: 3Dfx security issues

Alan Cox (alan@lxorguk.ukuu.org.uk)
Fri, 12 Mar 1999 18:47:51 +0000 (GMT)


> It seems that any of the kernel graphics driver projects are moving to
> similar approachs and will have similar problems. The question is
> how can this be handled better within the existing contraints?

It tends to come down to "was the board designed by someone who felt it
shouldn't trash your PC". SGI get away with this because their MMIO stuff
isnt capable of trashing the machine. I'm hoping Matrox got this right
as XFree86 + the PI direct render work + Mesa is going to be really nice
if they did.

As regards the 3DFx doodoo driver, I would personally say the situation
the driver creates is potentially worse but not if set up carefully. It goes
from "root can install something stupid" to "any user can trash the box" in
the naive setup. But with your driver and group only access it becomes
setgid voodoo and thats yes - definitely a win

Alan

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.tux.org/lkml/