[vorbis-dev] Ports

[Mike Coleman]

xiphmont at xiph.org (Monty) writes:
> This addresses the issue of the audio devices, but is there a similar
> non-root strategy for access to the realtime scheduler (Linux)?

The access is only needed at the start, if I understand correctly.  Maybe
there could be a small, setuid, easy-to-inspect-for-security wrapper that sets
this up and then execs the player.

Setuiding the whole player just seems like an accident waiting to happen.
Verifying that nothing ever runs off the end of any array, for example, no
matter what input is received, looks non-trivial to me for vorbis.

--Mike


-- 
[O]ne of the features of the Internet [...] is that small groups of people can
greatly disturb large organizations.  --Charles C. Mann

--- >8 ----
List archives:  http://www.xiph.org/archives/
Ogg project homepage: http://www.xiph.org/ogg/
To unsubscribe from this list, send a message to 'vorbis-dev-request at xiph.org'
containing only the word 'unsubscribe' in the body.  No subject is needed.
Unsubscribe messages sent to the list will be ignored/filtered.