cvs commit: src/usr.sbin/acpi/acpiconf acpiconf.c

Nate Lawson nate at root.org
Thu Mar 4 14:56:01 PST 2004


On Thu, 4 Mar 2004, M. Warner Losh wrote:
> In message: <20040304100856.Y24532 at root.org>
>             Nate Lawson <nate at root.org> writes:
> : I am concerned about this change since being able to open a descriptor
> : read-only implies they can do ioctl, which means they can also suspend the
> : system.  If we have to do this, we might have to go the setgid route
> : although I don't necessarily want to deal with the security implications
> : of that.  Users can get battery status through apm(8) but not battery
> : info.
>
> ioctl can be made to require a write open.  That's what the apm ioctls
> required, except for battery status.

Good idea.  Takawata-san, can you make this change?

-Nate


More information about the cvs-all mailing list