dragoran <dragoran(a)feuerpokemon.de> writes:
which is broken commands should only be filtered if they cause
damage,
but only because they may be able flash the firmware on a drive that
may not even exists is IMHO not a fix but a bug.
If you can issue such commands to the drive, you can easily:
- become root
- damage the drive
Should a chmod +w /dev/drive for a user give him root access to
the system (which can't be stopped even with selinux)?
--
Krzysztof Halasa