Re: access to /dev/mem [LWN.net]

Re: access to /dev/mem

Posted Jul 22, 2005 1:47 UTC (Fri) by sweikart (guest, #4276)
In reply to: The ExecShield patches by dlang
Parent article: Kernel Summit 2005: The ExecShield patches

Here's a good description of it:

And here's an implementation for dropping capabilities at boot time:

Since you can disable access to /dev/mem with the capability bounding set, I would request that the semantics of /dev/mem not change.

-scott

(Log in to post comments)

Re: access to /dev/mem

Posted Jul 25, 2005 11:54 UTC (Mon) by nix (subscriber, #2304) [Link]

The one-liner I use on my firewall is online here.