Subject: Re: Privilege Elevation with systrace
To: Julio Merino <jmmv@menta.net>
From: Andrew Brown <atatat@atatdot.net>
List: current-users
Date: 10/11/2002 18:28:51
>> or allow an application to read /dev/kmem
>>
>> netbsd-fsread: filename "/dev/kmem" then permit as :kmem
>
>So, this means that we do not need `aperture' any longer to run XFree86
>with a non-INSECURE kernel ?
"read". not "write".
x still needs to write to /dev/mem in order to work, and that's still
not allowed even for root at securelevels higher than 0.
--
|-----< "CODE WARRIOR" >-----|
codewarrior@daemon.org * "ah! i see you have the internet
twofsonet@graffiti.com (Andrew Brown) that goes *ping*!"
werdna@squooshy.com * "information is power -- share the wealth."