From: "Alexander E. Patrakov" <patrakov@ums.usu.ru>
To: Bodo Eggert <7eggert@gmx.de>
Cc: Kyle Moffett <mrmacman_g4@mac.com>,
linux-kernel@vger.kernel.org, schilling@fokus.fraunhofer.de
Subject: Re: [OT] Joerg Schilling flames Linux on his Blog
Date: Thu, 26 May 2005 18:33:27 +0600 [thread overview]
Message-ID: <4295C217.2040005@ums.usu.ru> (raw)
In-Reply-To: <Pine.LNX.4.58.0505261335440.2939@be1.lrz>
Bodo Eggert wrote:
>So we can
>
>1) give up and let any application with write access destroy the hardware
>
>
That won't be a problem if all apps with write access are running as
root or setuid and thus the list of them is well-controlled by root.
>2) implement a basic filter (common for all deviced) and a device-specific
> filter, which can be set by a userspace application.
>
>
In fact both approaches are used in the kernel.
(1) is used in the usbfs code, and thus SANE and gPhoto2 rely upon it
(BTW it's still possible for a user to install an old version of SANE
into /home/user and damage a scanner). Proper filtering in the kernel
would be probably just too complex in this "usb generic" case.
(2) is used e.g. in DRM code.
What's missing is a clearly stated policy that says which of those two
approaches should be applied in each particular case.
--
Alexander E. Patrakov
next prev parent reply other threads:[~2005-05-26 12:32 UTC|newest]
Thread overview: 48+ messages / expand[flat|nested] mbox.gz Atom feed top
[not found] <4847F-8q-23@gated-at.bofh.it>
[not found] ` <E1Db3zm-0004vF-9j@be1.7eggert.dyndns.org>
2005-05-25 22:46 ` OT] Joerg Schilling flames Linux on his Blog Joerg Schilling
2005-05-25 23:31 ` Kyle Moffett
2005-05-26 3:45 ` [OT] " Alexander E. Patrakov
2005-05-26 5:06 ` Giuseppe Bilotta
[not found] ` <Pine.LNX.4.58.0505261335440.2939@be1.lrz>
2005-05-26 12:33 ` Alexander E. Patrakov [this message]
[not found] ` <Pine.LNX.4.58.0505261651220.3407@be1.lrz>
2005-05-27 10:44 ` Joerg Schilling
2005-05-26 19:20 ` OT] " Bill Davidsen
2005-05-26 21:26 ` Kyle Moffett
2005-05-26 23:30 ` Matthias Andree
2005-05-27 9:39 ` Joerg Schilling
2005-05-27 11:09 ` Wakko Warner
2005-05-27 14:21 ` Dmitry Torokhov
2005-05-30 9:07 ` Joerg Schilling
2005-05-30 10:47 ` Markus Plail
2005-05-30 22:27 ` Dmitry Torokhov
2005-05-30 23:20 ` Måns Rullgård
2005-05-30 23:35 ` Brian O'Mahoney
2005-05-31 12:51 ` Joerg Schilling
2005-05-31 12:47 ` Joerg Schilling
[not found] ` <Pine.LNX.4.58.0505260205390.19389@be1.lrz>
2005-05-27 10:03 ` Joerg Schilling
[not found] ` <Pine.LNX.4.58.0505271633200.3055@be1.lrz>
2005-05-30 9:36 ` Joerg Schilling
[not found] ` <Pine.LNX.4.58.0505301326450.2363@be1.lrz>
2005-05-31 10:57 ` Joerg Schilling
2005-05-25 13:15 Joerg Schilling
2005-05-25 23:12 ` Kyle Moffett
2005-05-26 10:15 ` Joerg Schilling
2005-05-26 12:47 ` [OT] " Alexander E. Patrakov
2005-05-27 10:31 ` Joerg Schilling
-- strict thread matches above, loose matches on Subject: below --
2005-05-20 17:45 Patrick McFarland
2005-05-20 17:02 ` jmerkey
2005-05-20 18:24 ` Markus Plail
2005-05-20 18:34 ` Matthias-Christian Ott
2005-05-20 18:41 ` Lee Revell
2005-05-20 23:20 ` Brian O'Mahoney
2005-05-21 7:38 ` Adrian Bunk
2005-05-21 11:25 ` Bernd Petrovitsch
2005-05-21 11:33 ` Måns Rullgård
2005-05-22 18:24 ` Bernd Petrovitsch
2005-05-21 11:41 ` André Tomt
2005-05-21 23:24 ` Adrian Bunk
2005-05-22 0:27 ` Andre Tomt
2005-05-22 14:17 ` Matthias Andree
2005-05-21 16:39 ` Brian O'Mahoney
2005-05-21 23:59 ` Adrian Bunk
2005-05-22 1:22 ` Andrew Haninger
2005-05-22 4:50 ` Patrick McFarland
2005-05-22 14:39 ` Matthias Andree
2005-05-22 20:40 ` Bernhard Rosenkraenzer
2005-05-22 15:54 ` Alistair John Strachan
2005-05-23 13:17 ` Nix
2005-05-23 14:35 ` Brian O'Mahoney
2005-05-23 14:58 ` Nix
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=4295C217.2040005@ums.usu.ru \
--to=patrakov@ums.usu.ru \
--cc=7eggert@gmx.de \
--cc=linux-kernel@vger.kernel.org \
--cc=mrmacman_g4@mac.com \
--cc=schilling@fokus.fraunhofer.de \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox