Messages in this thread | | | Date | Sat, 22 Apr 2006 10:57:37 +0200 | From | Adrian Bunk <> | Subject | Re: [2.6 patch] remove the Root Plug Support sample module |
| |
On Fri, Apr 21, 2006 at 01:29:18PM -0700, Greg KH wrote: >... > So, I'd like to keep this in the tree, for as long as the LSM interface > sticks around, if possible. It's not hurting anything, and it does work > for users, and is a good example starting point for people wanting to > use the LSM interface. > > Unless there are any known security problems with it? If so, please let > me know.
Using USB Vendor ID/USB Product ID for identifying an USB device doesn't seem to bring real security since: - every other device of the same type works as well - using an arbitrary USB device with a manipulated USB Vendor ID/USB Product ID seems quite possible
It might work as an example, but if people think it would bring them real security that's a dangerous misunderstanding.
> thanks, > > greg k-h
cu Adrian
--
"Is there not promise of rain?" Ling Tan asked suddenly out of the darkness. There had been need of rain for many days. "Only a promise," Lao Er said. Pearl S. Buck - Dragon Seed
- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| |