svn commit: r252841 - in head/sys: dev/mem kern sys

[Jase Thew]

On 05/07/2013 22:31, Jamie Gritton wrote:
> Author: jamie
> Date: Fri Jul  5 21:31:16 2013
> New Revision: 252841
> URL: http://svnweb.freebsd.org/changeset/base/252841
>
> Log:
>    Add new privileges, PRIV_KMEM_READ and PRIV_KMEM_WRITE, used in opening
>    /dev/kmem and /dev/mem (in addition to traditional file permission checks).
>    PRIV_KMEM_READ is different from other PRIV_* checks in that it's allowed
>    by default.
>
>    Reviewed by:	kib, mckusick
>

Hi Jamie,

As a result of this commit (and r252845), it is no longer possible to 
access /dev/mem and /dev/kmem inside of a jail - is this behaviour 
intentional?

# dd if=/dev/mem bs=64 count=1
dd: /dev/mem: Operation not permitted

Regards,

Jase.

-- 
Jase Thew
jase at FreeBSD.org
FreeBSD Ports Committer