linux-input.vger.kernel.org archive mirror
 help / color / mirror / Atom feed
From: Pavel Machek <pavel@ucw.cz>
To: Dmitry Torokhov <dmitry.torokhov@gmail.com>
Cc: Henrique de Moraes Holschuh <hmh@hmh.eng.br>,
	Linux Input <linux-input@vger.kernel.org>,
	LKML <linux-kernel@vger.kernel.org>,
	Jason Wessel <jason.wessel@windriver.com>
Subject: Re: [RFC] Input: implement sysrq as an input handler
Date: Sun, 4 Apr 2010 15:27:34 +0200	[thread overview]
Message-ID: <20100404132734.GB1346@ucw.cz> (raw)
In-Reply-To: <20100401154212.GA7900@core.coreip.homeip.net>

Hi!

> > If userspace disables sysrq during normal operation, that makes it
> > useless.
> > 
> > If normal user could do that, that's a security problem.
> > 
> 
> Yes, and...? This patch does not change the way one enables, disables,
> intercepts, etc. SysRq and SAK compared to how it was handled when SysRq
> was part of keyboard _input handler_. The only thisng this patch does is
> moving the code into a _separate_ input handler.

Yep, that was just a note.

> > > The problem is that device does not know what SysRq and especially SAK are.
> > > User can reassign key codes and key symbols easily.
> > 
> > That was not case in original implementation; it had hardcoded keymap.
> 
> The earth was also flat back then and the only keyboard was AT one. SAK
> was always part of keymap so could be reassinged at any time.

Well, there are two SAKs.

One SAK -- in keymap, is remappable and always was.

Second, sysrq-saK -- is (was?) hardcoded and not affected by
keymap. Please don't change that.

> > > I don't think we had any issues like this since 2.5 so I would not worry
> > > about userspace too much. If anything we just need to review what stuff
> > > we run as root (we do that anyway, right?).
> > 
> > Hehe. If X can break sysrq, that's both X and sysrq problem.
> 
> Root can disable Sysrq... News at 11.

Root *does* disable sysrq is indeed news ... and problem.
									Pavel
-- 
(english) http://www.livejournal.com/~pavelmachek
(cesky, pictures) http://atrey.karlin.mff.cuni.cz/~pavel/picture/horses/blog.html

  reply	other threads:[~2010-04-04 13:27 UTC|newest]

Thread overview: 13+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2010-03-17  6:19 [RFC] Input: implement sysrq as an input handler Dmitry Torokhov
2010-03-19  0:00 ` Henrique de Moraes Holschuh
2010-03-19  0:09   ` Dmitry Torokhov
2010-03-19 16:06     ` Henrique de Moraes Holschuh
2010-03-19 18:03       ` Dmitry Torokhov
2010-03-20  2:53         ` Henrique de Moraes Holschuh
2010-03-22  4:59           ` Dmitry Torokhov
2010-04-01 13:34             ` Pavel Machek
2010-04-01 15:42               ` Dmitry Torokhov
2010-04-04 13:27                 ` Pavel Machek [this message]
2010-04-16  5:33                   ` Dmitry Torokhov
2010-03-19  0:13 ` Randy Dunlap
2010-03-19  0:30   ` Dmitry Torokhov

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=20100404132734.GB1346@ucw.cz \
    --to=pavel@ucw.cz \
    --cc=dmitry.torokhov@gmail.com \
    --cc=hmh@hmh.eng.br \
    --cc=jason.wessel@windriver.com \
    --cc=linux-input@vger.kernel.org \
    --cc=linux-kernel@vger.kernel.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).