port specification under SCD_IOPORTS
Javier Juan Martínez Cabezón <[email protected]>
| Newsgroups | gmane.linux.rsbac |
|---|---|
| Message-ID | <CAD98N_HV45XCr3nMMGBSB_rsmaiN4Nhj=an5bZNqPxFYaG3zhA@mail.gmail.com> |
I make this suggestion that I get realized after this thread from gentoo hardened: http://archives.gentoo.org/gentoo-hardened/msg_8160a0d4bb4e2a0cf09f91c06ded7001.xml I think if it could be, specify under SCD_IOPORTS which port is permited to do iopl/ioperm request, something like AUTH makes with UIDs, since some software would require to only do privilege I/O port against one particular port and no to everyone. It's another less privilege approach that would be useful for example with propietary nvidia drivers that still using priv I/O ports to do his tasks.