cvs commit: src/share/man/man4 tap.4 src/sys/net if_tap.c
Robert Watson
rwatson at FreeBSD.org
Wed Apr 13 09:03:49 PDT 2005
On Wed, 13 Apr 2005, Matthew N. Dodd wrote:
> mdodd 2005-04-13 00:30:19 UTC
>
> FreeBSD src repository
>
> Modified files:
> share/man/man4 tap.4
> sys/net if_tap.c
> Log:
> Provide a sysctl (net.link.tap.user_open) to allow unpriviliged
> acces to tap(4) device nodes based on file system permission.
>
> Duplicate the 'debug.if_tap_debug' sysctl under the
> 'net.link.tap' hierarchy.
Is there any reason to require suser() at all for open, given that our
devfs permissions are conservative? Maybe we should remove that suser()
and add a couple for specific tapioctl() calls that are more sensitive?
Robert N M Watson
More information about the cvs-src
mailing list