[COLUG] bypassing CAP_SYS_ADMIN for device access

Rick Troth rmt at casita.net
Wed Jan 17 22:37:07 EST 2007


> > Does anyone on the list know how I can get around CAP_SYS_ADMIN?
>
> Do you have source code?

Sure, but the kernel module as shipped in the distros
will have the CAP_SYS_ADMIN check compiled in.

As it is, I have to be root to access the character special.
No use 'chmod 666' the file because the driver has this
additional test.  I could possibly tickly the SETUID bit
but would have to do that for every executable that might touch
this device file.

More in a following note.

-- R;



More information about the colug432 mailing list