Subject: Re: [linux-audio-dev] Re: [Jackit-devel] Re: realtime-lsm in the kernel
From: Lee Revell (rlrevell_AT_joe-job.com)
Date: Sun Sep 12 2004 - 07:19:00 EEST
On Sat, 2004-09-11 at 12:09, Jack O'Quin wrote:
> torbenh_AT_gmx.de writes:
>
> > i think they will object the allcaps option. but that one could be
> > left out.
> >
> > the other options only open doors for DoS attacks.
>
> That's a good point.
>
> What if we made allcaps conditional, based on another Kconfig option?
Isn't a DoS attack also the worst case scenario with allcaps? Or am I
missing something?
I do not see the objection; assuming there is a legitimate use for
allcaps, the DoS exposure would certainly be less bad than having that
process just run as root. A DoS can't blow away the password file...
Lee
This archive was generated by hypermail 2b28 : Sun Sep 12 2004 - 07:25:22 EEST