[ewg] Allowing ib dignostics to be run without being logged in as root.

Sasha Khapyorsky sashak at voltaire.com
Tue Jun 1 12:28:03 PDT 2010


On 12:44 Tue 01 Jun     , Yevgeny Kliteynik wrote:
> 
> $> cat /etc/udev/rules.d/80-ib-umad.rules
> KERNEL=="umad*", NAME="infiniband/%k", MODE="0666"

It is not the same. Your propose to expose /dev/infiniband/umad device
access to all world, which is obviously even more dangerous than SUIDing
diagnostic programs.

Sasha



More information about the ewg mailing list