lkml.org 
[lkml]   [2006]   [Apr]   [22]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
Date
From
SubjectRe: [2.6 patch] remove the Root Plug Support sample module
On Fri, Apr 21, 2006 at 01:29:18PM -0700, Greg KH wrote:
>...
> So, I'd like to keep this in the tree, for as long as the LSM interface
> sticks around, if possible. It's not hurting anything, and it does work
> for users, and is a good example starting point for people wanting to
> use the LSM interface.
>
> Unless there are any known security problems with it? If so, please let
> me know.

Using USB Vendor ID/USB Product ID for identifying an USB device doesn't
seem to bring real security since:
- every other device of the same type works as well
- using an arbitrary USB device with a manipulated
USB Vendor ID/USB Product ID seems quite possible

It might work as an example, but if people think it would bring them
real security that's a dangerous misunderstanding.

> thanks,
>
> greg k-h

cu
Adrian

--

"Is there not promise of rain?" Ling Tan asked suddenly out
of the darkness. There had been need of rain for many days.
"Only a promise," Lao Er said.
Pearl S. Buck - Dragon Seed

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/

\
 
 \ /
  Last update: 2006-04-22 19:21    [W:0.077 / U:0.188 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site