Re: [RFC] Geographical/regulatory information for ieee80211

["Jouni Malinen" <jkm@devicescape.com>]

On Wed, Apr 26, 2006 at 07:54:31PM -0500, Larry Finger wrote:

> I don't think it would make that much difference as the user could easily 
> lie about their locality and get any set of parameters that they wanted. 

Well, not any set.. One of the configured countries, yes, but that is
not same as setting arbitrary TX power limit and allowed channel sets..
Anyway, users should be allowed to move from one country to another and
still being able to use their wlan card (within the limits of the
current location).

> I am leaning toward putting the geographical information into a userland 
> daemon. That way we won't have to patch the kernel every time a country 
> modifies its regulations. In addition, the kernel will be smaller. The 
> downside is that the daemon will have to be updated and supplied in some 
> convenient form, perhaps as part of a wireless tools package.

I'm strongly in favor of doing this in user space, too. In order to
provide some control on what end users do with this, I would consider
including a signature on a data file and have the user space tool verify
that signature before accepting the data. This signature need not be
anything extra secure, i.e., it could just be a keyed checksum of the
file using a well-known key. The main point here is that it shows some
attempt on limiting end users from setting random values to regulatory
limits. Of course, if someone really wants to change these values, they
could do so since the source code for the tool would be available and so
would the key used for signing the file in the first place.

I don't know how secure a system would be needed to pass requirements
that FCC and similar organizations place on wireless devices. I would
like to handle this with fully open source tools and having some kind of
simple signature on the data file would be good starting point. It is up
to vendors then to decide whether they are fine with such a mechanism or
whether some additional tool (like the Intel plan on using a closed
source user space tool) would be needed on top of this.

-- 
Jouni Malinen                                            PGP id EFC895FA