From: "Alexander E. Patrakov" <patrakov@ums.usu.ru>
To: Bodo Eggert <7eggert@gmx.de>
Cc: Kyle Moffett <mrmacman_g4@mac.com>,
linux-kernel@vger.kernel.org, schilling@fokus.fraunhofer.de
Subject: Re: [OT] Joerg Schilling flames Linux on his Blog
Date: Thu, 26 May 2005 18:33:27 +0600 [thread overview]
Message-ID: <4295C217.2040005@ums.usu.ru> (raw)
In-Reply-To: <Pine.LNX.4.58.0505261335440.2939@be1.lrz>
Bodo Eggert wrote:
>So we can
>
>1) give up and let any application with write access destroy the hardware
>
>
That won't be a problem if all apps with write access are running as
root or setuid and thus the list of them is well-controlled by root.
>2) implement a basic filter (common for all deviced) and a device-specific
> filter, which can be set by a userspace application.
>
>
In fact both approaches are used in the kernel.
(1) is used in the usbfs code, and thus SANE and gPhoto2 rely upon it
(BTW it's still possible for a user to install an old version of SANE
into /home/user and damage a scanner). Proper filtering in the kernel
would be probably just too complex in this "usb generic" case.
(2) is used e.g. in DRM code.
What's missing is a clearly stated policy that says which of those two
approaches should be applied in each particular case.
--
Alexander E. Patrakov
next prev parent reply other threads:[~2005-05-26 12:32 UTC|newest]
Thread overview: 48+ messages / expand[flat|nested] mbox.gz Atom feed top
[not found] <4847F-8q-23@gated-at.bofh.it>
[not found] ` <E1Db3zm-0004vF-9j@be1.7eggert.dyndns.org>
2005-05-25 22:46 ` OT] Joerg Schilling flames Linux on his Blog Joerg Schilling
2005-05-25 23:31 ` Kyle Moffett
2005-05-26 3:45 ` [OT] " Alexander E. Patrakov
2005-05-26 5:06 ` Giuseppe Bilotta
[not found] ` <Pine.LNX.4.58.0505261335440.2939@be1.lrz>
2005-05-26 12:33 ` Alexander E. Patrakov [this message]
[not found] ` <Pine.LNX.4.58.0505261651220.3407@be1.lrz>
2005-05-27 10:44 ` Joerg Schilling
2005-05-26 19:20 ` OT] " Bill Davidsen
2005-05-26 21:26 ` Kyle Moffett
2005-05-26 23:30 ` Matthias Andree
2005-05-27 9:39 ` Joerg Schilling
2005-05-27 11:09 ` Wakko Warner
2005-05-27 14:21 ` Dmitry Torokhov
2005-05-30 9:07 ` Joerg Schilling
2005-05-30 10:47 ` Markus Plail
2005-05-30 22:27 ` Dmitry Torokhov
2005-05-30 23:20 ` Måns Rullgård
2005-05-30 23:35 ` Brian O'Mahoney
2005-05-31 12:51 ` Joerg Schilling
2005-05-31 12:47 ` Joerg Schilling
[not found] ` <Pine.LNX.4.58.0505260205390.19389@be1.lrz>
2005-05-27 10:03 ` Joerg Schilling
[not found] ` <Pine.LNX.4.58.0505271633200.3055@be1.lrz>
2005-05-30 9:36 ` Joerg Schilling
[not found] ` <Pine.LNX.4.58.0505301326450.2363@be1.lrz>
2005-05-31 10:57 ` Joerg Schilling
2005-05-25 13:15 Joerg Schilling
2005-05-25 23:12 ` Kyle Moffett
2005-05-26 10:15 ` Joerg Schilling
2005-05-26 12:47 ` [OT] " Alexander E. Patrakov
2005-05-27 10:31 ` Joerg Schilling
-- strict thread matches above, loose matches on Subject: below --
2005-05-20 17:45 Patrick McFarland
2005-05-20 17:02 ` jmerkey
2005-05-20 18:24 ` Markus Plail
2005-05-20 18:34 ` Matthias-Christian Ott
2005-05-20 18:41 ` Lee Revell
2005-05-20 23:20 ` Brian O'Mahoney
2005-05-21 7:38 ` Adrian Bunk
2005-05-21 11:25 ` Bernd Petrovitsch
2005-05-21 11:33 ` Måns Rullgård
2005-05-22 18:24 ` Bernd Petrovitsch
2005-05-21 11:41 ` André Tomt
2005-05-21 23:24 ` Adrian Bunk
2005-05-22 0:27 ` Andre Tomt
2005-05-22 14:17 ` Matthias Andree
2005-05-21 16:39 ` Brian O'Mahoney
2005-05-21 23:59 ` Adrian Bunk
2005-05-22 1:22 ` Andrew Haninger
2005-05-22 4:50 ` Patrick McFarland
2005-05-22 14:39 ` Matthias Andree
2005-05-22 20:40 ` Bernhard Rosenkraenzer
2005-05-22 15:54 ` Alistair John Strachan
2005-05-23 13:17 ` Nix
2005-05-23 14:35 ` Brian O'Mahoney
2005-05-23 14:58 ` Nix
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=4295C217.2040005@ums.usu.ru \
--to=patrakov@ums.usu.ru \
--cc=7eggert@gmx.de \
--cc=linux-kernel@vger.kernel.org \
--cc=mrmacman_g4@mac.com \
--cc=schilling@fokus.fraunhofer.de \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.