Re: KAUTH_PROCESS_SCHEDULER_*AFFINITY restricted to root in default secmodel?

2011-09-25 Thread Matthew Mondor
On Mon, 29 Aug 2011 01:07:52 +0200 Alistair Crooks a...@pkgsrc.org wrote: Sorry for replying to an old thread, I'm still catching up with mail :) i've found this some what annoying. IMO, we should have a a way to say let normal users do this. i'm not sure sysctl is the right place, but

KAUTH_PROCESS_SCHEDULER_*AFFINITY restricted to root in default secmodel?

2011-08-28 Thread Jeff Rizzo
I've just had my first occasion to play with the processor affinity code, via porting some code from linux. It was very straightforward, but there's one glaring difference: linux doesn't (by default, anyway) require root to use their sched_setaffinity(), while we do require root (by default)

Re: KAUTH_PROCESS_SCHEDULER_*AFFINITY restricted to root in default secmodel?

2011-08-28 Thread Thor Lancelot Simon
On Sun, Aug 28, 2011 at 01:03:14PM -0700, Jeff Rizzo wrote: I don't pretend to understand the security ramifications regarding processor affinity; I do wonder, however, whether it warrants requiring elevated privilege (and possible exposure via other code in the process which doesn't

Re: KAUTH_PROCESS_SCHEDULER_*AFFINITY restricted to root in default secmodel?

2011-08-28 Thread Jean-Yves Migeon
On 28.08.2011 22:03, Jeff Rizzo wrote: I've just had my first occasion to play with the processor affinity code, via porting some code from linux. It was very straightforward, but there's one glaring difference: linux doesn't (by default, anyway) require root to use their