On Fri, Apr 21, 2006 at 01:29:18PM -0700, Greg KH wrote:
>...
> So, I'd like to keep this in the tree, for as long as the LSM interface
> sticks around, if possible. It's not hurting anything, and it does work
> for users, and is a good example starting point for people wanting to
> use the LSM interface.
>
> Unless there are any known security problems with it? If so, please let
> me know.
Using USB Vendor ID/USB Product ID for identifying an USB device doesn't
seem to bring real security since:
- every other device of the same type works as well
- using an arbitrary USB device with a manipulated
USB Vendor ID/USB Product ID seems quite possible
It might work as an example, but if people think it would bring them
real security that's a dangerous misunderstanding.
> thanks,
>
> greg k-h
cu
Adrian
--
"Is there not promise of rain?" Ling Tan asked suddenly out
of the darkness. There had been need of rain for many days.
"Only a promise," Lao Er said.
Pearl S. Buck - Dragon Seed
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to [email protected]
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/
[Index of Archives]
[Kernel Newbies]
[Netfilter]
[Bugtraq]
[Photo]
[Stuff]
[Gimp]
[Yosemite News]
[MIPS Linux]
[ARM Linux]
[Linux Security]
[Linux RAID]
[Video 4 Linux]
[Linux for the blind]
[Linux Resources]
