Ar Sul, 2006-07-30 am 10:53 -0400, ysgrifennodd Theodore Tso:
> Personally, I don't see why the requirement of an external daemon is
> really considered that evil. We allow drivers that depend on firmware
An open source daemon doing the supervising seems fine. We do that for
IPv4 even (dhcpd, dhcpcd, routed, gated, zebra, ....) ;)
> loaders, don't we? I could imagine a device that required a digitally
> signed message (using RSA) with a challenge/response protocol embedded
> inside that was necessary to configure said device, which is
> calculated in userspace and then passed down into the kernel to be
> installed into the device so that it could function. Do we really
> want to consider that to be objectionable?
If it controls the use of the device inappropriately then yes we should.
Suppose it passes down an RSA signed message that is computed by
verifying you are running a Red Hat Enterprise Linux 4 official shipped
kernel on an approved IBM platform and things like that - that would
annoy me.
Using GPG keys to verify code matches approved code is fine. The ISDN
layer has done this for many years and if its not the signed code
version it didn't have the old silly approvals stuff (Fortunately
nowdays even politicians have realised that if you need approval for
something to stop it doing bad stuff to the phone network then bad
people can do bad stuff anyway and this is bad for national security)
I think from a vendor perspective being able to ship a source set for
such a daemon which Intel has signed as "this source meets the rules" is
great. As an end user I want the flexibility to do other stuff except
where prohibited by law (not by Intel, not by paranoid lawyers and not
by FCC lack of clarity)
I also want to violate the power and other policy rules Intel wishes to
enforce on their hardware for legal and legitimate reasons. As a radio
amateur I am permitted in law to transmit certain classes of signals in
that frequency space at higher power than in the hands of a random UK
user of license exempt technology.
Alan
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to [email protected]
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/
[Index of Archives]
[Kernel Newbies]
[Netfilter]
[Bugtraq]
[Photo]
[Stuff]
[Gimp]
[Yosemite News]
[MIPS Linux]
[ARM Linux]
[Linux Security]
[Linux RAID]
[Video 4 Linux]
[Linux for the blind]
[Linux Resources]
