From: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
To: Kees Cook <keescook@chromium.org>
Cc: linux-kernel@vger.kernel.org, Matthew Garrett <mjg59@coreos.com>,
kernel-hardening@lists.openwall.com
Subject: Re: [PATCH] Allow userspace to request device probing even if defer_all_probes is true
Date: Wed, 4 Jan 2017 10:13:12 +0100 [thread overview]
Message-ID: <20170104091312.GA31129@kroah.com> (raw)
In-Reply-To: <20170103230720.GA115084@beast>
On Tue, Jan 03, 2017 at 03:07:20PM -0800, Kees Cook wrote:
> From: Matthew Garrett <mjg59@coreos.com>
>
> Userspace may wish to make a policy decision to allow certain devices
> to be attached, such as keyboards.
I don't understand what that sentance means. Why wouldn't keyboards be
attached?
> Add a force_probe sysfs node to each device, which if written will
> trigger a probe even if defer_all_probes is currently true.
Why not just manually trigger the bind of the device? I don't
understand the problem here that is being addressed, nor do I understand
how this would be used. More explaination please.
thanks,
greg k-h
next prev parent reply other threads:[~2017-01-04 9:21 UTC|newest]
Thread overview: 7+ messages / expand[flat|nested] mbox.gz Atom feed top
2017-01-03 23:07 [PATCH] Allow userspace to request device probing even if defer_all_probes is true Kees Cook
2017-01-04 9:13 ` Greg Kroah-Hartman [this message]
2017-01-04 18:11 ` Matthew Garrett
2017-01-04 19:42 ` Greg Kroah-Hartman
2017-01-04 19:53 ` Matthew Garrett
2017-01-04 20:03 ` Greg Kroah-Hartman
2017-01-04 20:06 ` Matthew Garrett
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20170104091312.GA31129@kroah.com \
--to=gregkh@linuxfoundation.org \
--cc=keescook@chromium.org \
--cc=kernel-hardening@lists.openwall.com \
--cc=linux-kernel@vger.kernel.org \
--cc=mjg59@coreos.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox