HomeFreeBSD

Switch prison check from PROV_DRIVER to PRIV_KMEM_WRITE (like /dev/mem).

Description

Switch prison check from PROV_DRIVER to PRIV_KMEM_WRITE (like /dev/mem).

Access to the dri device gives effectively access to the entire memory of the machine (you can program
the graphic card to do DMA).

For current/stable/release this is a NOP, as access to memory is not allowed in a jail. This puts the dri
device into the same (in)security class than /dev/mem for future use.

Discussed with: anholt(?) several years ago
Sponsored by: Hackathon Essen 2017

Details

Committed
netchildJul 9 2017, 6:50 AM
Parents
rS320826: - Extend pr_allow flags visually to 32 bits, to make it more obvious at first…
Branches
Unknown
Tags
Unknown