Subject: Re: CVS commit: src/sys/secmodel/bsd44
To: YAMAMOTO Takashi <yamt@mwd.biglobe.ne.jp>
From: Elad Efrat <elad@NetBSD.org>
List: tech-kern
Date: 11/02/2006 18:14:54
YAMAMOTO Takashi wrote:
>>> sorry, it wasn't fine actually.
>>> it can't work because dev_t has separate namespaces for
>>> block and char devices.
>> hence the "please review" in the unified vchr/vblk handling. :)
>>
>> what do you suggest? KAUTH_DEVICE_RAWIO_BLOCK/CHAR?
>
> again, my preference is something like this. :-)
> int kauth_authorize_device_specopen(cred, vp, r/w);
> int kauth_authorize_device_passthru(cred, dev_t, void *);
the first one is new. ;)
what do we pass to iskmemdev()? I assume we don't want to issue a
VOP_GETATTR() on vp?
-e.
--
Elad Efrat