On 06/29/2012 07:57 PM, Corey Minyard wrote:
>  seems to me that it's better to directly query what is running on the 
> target to know what is running on it, but perhaps that's a security 
> problem waiting to happen.  And perhaps it's better to have a small 
> program set this at startup, since this operation will currently fail on 
> the majority of systems out there.

Hi All,
The intend of this patch was not to really workaround any issues, the aim was 
for the management software to use this data. I think Corey summed it up pretty 
well in his previous comment. Management software associated with BMC usually 
use this information to let the users know about the OS that is using the BMC. 
Generally there are 3rd party application software that goes and pretty much 
fills up the OS env information and the management software uses this. My 
intend was why don't we get this information loaded by the driver itself. If 
there are applications that wants to rewrite it, so be it..! 
Rather than just have a static entry such as 'Linux' I could probably write the 
version number and more(distro name etc.. ) 

Thoughts.. ? 


I know there were some concerns with the security aspect, Can you please let me 
know what kind of security holes we could be looking at ? 




Thanks,
G


------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
_______________________________________________
Openipmi-developer mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openipmi-developer

Reply via email to