lkml.org 
[lkml]   [2020]   [Jun]   [9]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    Date
    From
    SubjectRe: [RFC] Restrict the untrusted devices, to bind to only a set of "whitelisted" drivers
    On Mon, Jun 08, 2020 at 11:29:58AM -0700, Jesse Barnes wrote:
    > > Now, as to you all getting some sort of "Hardware flag" to determine
    > > "inside" vs. "outside" devices, hah, good luck! It took us a long time
    > > to get that for USB, and even then, BIOSes lie and get it wrong all the
    > > time. So you will have to also deal with that in some way, for your
    > > userspace policy.
    >
    > I think that's inherently platform specific to some extent. We can do
    > it with our coreboot based firmware, but there's no guarantee other
    > vendors will adopt the same approach. But I think at least for the
    > ChromeOS ecosystem we can come up with something that'll work, and
    > allow us to dtrt in userspace wrt driver binding.

    Why not work with the UEFI group to add this to their spec so that it
    will work for all future firmware releases, not just your
    vendor-specific one? :)

    thanks,

    greg k-h

    \
     
     \ /
      Last update: 2020-06-09 07:57    [W:4.049 / U:0.036 seconds]
    ©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site