I would certainly feel better if this were possible, in which case Andre's
patch would be more reasonable.
If you can't bit-bang hardware directly, and kernel API is the only access
to devices, then it's easier to secure.
As long as raw hardware access is possible, no amount of kernel API
parameter checking will protect you from malicious programs. (I think,
this is a point the GGI guys try to make)
What userspace programs still require direct raw access to hardware? Only
X servers?
-Dan
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.tux.org/lkml/