On Fri, 2008-02-22 at 11:18 +0100, Christian Krafft wrote: > Hi Ben, > > regarding your problem with poking into PCI ranges: > As arnd mentioned, we could check, wether there is a mapping for that address > and if so, allow the access. That could be done in check_legacy_ioport, > although the name looks a bit misleading. > What do you think ? It would be pretty gross to end up checking the whole device-tree for things... Maybe we could check that there's something in the resource tree though, under ioport_resources, that matches the requested port. But again, its a matter of preventing root from being stupid, which I'm not sure is that worth pursuing... Ben.