[rsbac] (no subject)

[Amon Ott]

On Wednesday, 24. April 2002 04:23, Metrix wrote:
> Thanks Amon, I really appreciate your detailed
> replies. Just a quick question, why does root require
> access to /dev/mem, and SCD target kmem, in order to
> access /dev/mem?

Kernel memory access is extremely dangerous, and you can access it through 
several devices and /proc/kcore. So I rather made an extra SCD target than 
relying on correct device and (non-persistent) proc file access control.

Amon.
--
http://www.rsbac.org