security issues of aio
Nicolas Rachinsky
fbsd-stable-0 at ml.turing-complete.org
Fri Feb 16 20:07:30 UTC 2007
Hallo,
in /sys/conf/NOTES there is a comment
| # Use real implementations of the aio_* system calls. There are numerous
| # stability and security issues in the current aio code that make it
| # unsuitable for inclusion on machines with untrusted local users.
| options VFS_AIO
Are there still problems with aio?
I only found http://xforce.iss.net/xforce/xfdb/7693, but no
advisory or other hint that this was fixed (I think I must have missed
that somehow). And some closed PRs about fixed problems.
Do these affect aio.ko as well?
Thanks,
Nicolas
--
http://www.rachinsky.de/nicolas
More information about the freebsd-stable
mailing list