Re: [PATCH][RFC] 2.5.42: remove capable(CAP_SYS_RAWIO) check from
Manfred Spraul (manfred@colorfullife.com)
Sun, 13 Oct 2002 19:04:22 +0200
Olaf Dietsche wrote:
>
> Now, I have to run this process as root, regardless of filesystem
> permissions. So, if I trust this particular process with full
> privileges now, there's no problem in reducing its power a little bit.
>
What about writing a small wrapper application that drops all priveleges
except CAP_RAWIO, switches to user to the user you want, then execs the
target application that needs to access /dev/kmem?
Or store the capabilities in the filesystem, but I don't know which
filesystem supports that.
--
Manfred
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/