lkml.org 
[lkml]   [2006]   [Apr]   [22]   [last100]   RSS Feed
Views: [more markup]   [less markup]   [headers]   [forward]  
 
Messages in this thread
/
DateSat, 22 Apr 2006 10:57:37 +0200
FromAdrian Bunk <>
SubjectRe: [2.6 patch] remove the Root Plug Support sample module
On Fri, Apr 21, 2006 at 01:29:18PM -0700, Greg KH wrote:
>...
> So, I'd like to keep this in the tree, for as long as the LSM interface
> sticks around, if possible.  It's not hurting anything, and it does work
> for users, and is a good example starting point for people wanting to
> use the LSM interface.
> 
> Unless there are any known security problems with it?  If so, please let
> me know.

Using USB Vendor ID/USB Product ID for identifying an USB device doesn't 
seem to bring real security since:
- every other device of the same type works as well
- using an arbitrary USB device with a manipulated
  USB Vendor ID/USB Product ID seems quite possible

It might work as an example, but if people think it would bring them 
real security that's a dangerous misunderstanding.

> thanks,
> 
> greg k-h

cu
Adrian

-- 

       "Is there not promise of rain?" Ling Tan asked suddenly out
        of the darkness. There had been need of rain for many days.
       "Only a promise," Lao Er said.
                                       Pearl S. Buck - Dragon Seed

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/

\
 
 \ /
  Last update: 2006-04-22 17:21    [from the cache]
©2003-2008