Re: [PATCH 7/9] netfilter: xtables: inclusion of xt_SYSRQ

[Patrick McHardy <kaber@trash.net>]

John Haxby wrote:
> On 17/03/10 13:56, Patrick McHardy wrote:
>> Jan Engelhardt wrote:
>>   
>>> The SYSRQ target will allow to remotely invoke sysrq on the local
>>> machine. Authentication is by means of a pre-shared key that can
>>> either be transmitted plaintext or digest-secured.
>>>      
>> Lets deal with the other modules first while I make up my mind.
>>    
> 
> 
> I'm happy to defend the security aspects of this module, if that's
> what's concerning you.
> 
> I do know that there are quite a few people here who want to be able to
> do remote sysrq -- they used to have a "crash trolley" consisting of a
> PS/2 keyboard and a monitor.   Unfortunately most of their new machines
> only have USB and you can't hotplug a USB keyboard in many of the
> circumstances for which you want to (for example) trigger a crash.
> 
> I guess that also means I'm happy to produce valid use-cases.

It seems useful to me, I'm mainly wondering whether there's a chance
that we'll get kdboe support in the forseeable future, which would
make this pretty much obsolete I guess.

I also want to wait a bit to see whether there are any comments from
other developers since I guess most haven't looked at this module so
far.