cvs commit: src/usr.sbin/acpi/acpiconf acpiconf.c

[M. Warner Losh]

In message: <20040304100856.Y24532 at root.org>
            Nate Lawson <nate at root.org> writes:
: I am concerned about this change since being able to open a descriptor
: read-only implies they can do ioctl, which means they can also suspend the
: system.  If we have to do this, we might have to go the setgid route
: although I don't necessarily want to deal with the security implications
: of that.  Users can get battery status through apm(8) but not battery
: info.

ioctl can be made to require a write open.  That's what the apm ioctls
required, except for battery status.

Warner