[ofa-general] Allowing end-users to query for fabric information

[Mike Heinz]

It's comparable to saying that a single machine on the company net can
subvert DNS.

I know, technically that's true - but people also spend a great deal of
effort hardening DNS against attack.

--
Michael Heinz
Principal Engineer, Qlogic Corporation
King of Prussia, Pennsylvania

-----Original Message-----
From: Roland Dreier [mailto:rdreier at cisco.com] 
Sent: Wednesday, October 08, 2008 2:52 PM
To: Mike Heinz
Cc: Hal Rosenstock; general at lists.openfabrics.org
Subject: Re: [ofa-general] Allowing end-users to query for fabric
information

 > See, my "root" problem here is that y'all are telling me that if a
user  > gains root access to a single node on the fabric, they can use
that node  > to undermine the entire fabric.

Why is that surprising?

 - R.