From owner-cvs-all Tue Apr 4 1:46:52 2000 Delivered-To: cvs-all@freebsd.org Received: from finch-post-12.mail.demon.net (finch-post-12.mail.demon.net [194.217.242.41]) by hub.freebsd.org (Postfix) with ESMTP id 5556B37B733; Tue, 4 Apr 2000 01:46:34 -0700 (PDT) (envelope-from n_hibma@calcaphon.com) Received: from calcaphon.demon.co.uk ([193.237.19.5] helo=bluebottle.qubesoft.com) by finch-post-12.mail.demon.net with esmtp (Exim 2.12 #1) id 12cOym-0001i0-0C; Tue, 4 Apr 2000 08:46:32 +0000 Received: from henny.qubesoft.com (henny.qubesoft.com [192.168.1.5]) by bluebottle.qubesoft.com (8.9.3/8.9.1) with ESMTP id JAA73707; Tue, 4 Apr 2000 09:48:05 +0100 (BST) (envelope-from n_hibma@calcaphon.com) Date: Tue, 4 Apr 2000 09:42:50 +0100 (BST) From: Nick Hibma X-Sender: n_hibma@localhost Reply-To: Nick Hibma To: Bill Fumerola Cc: Warner Losh , "Jonathan M. Bresler" , cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org Subject: Re: cvs commit: src/sys/dev/usb usb.h src/usr.sbin/usbd usbd.c In-Reply-To: <20000403202657.Z23367@jade.chc-chimes.com> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-cvs-all@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG > > Since this is userland, I assume that the autoload will happen only if > > the security level will allow it? If not, there's a problem here. > > FYI, I'm pretty sure the same technique is used when ifconfig(8)ing a interface > that isn't loaded, or running vinum(8) without it in the kernel, etc. > > If this is allowed, it's kldload() to blame, not usbd/ifconfig/vinum It is definitely true that kldload should enforce the security settings, not userland utils (that are straightforward to write). Nick -- n_hibma@webweaving.org n_hibma@freebsd.org USB project http://www.etla.net/~n_hibma/ To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe cvs-all" in the body of the message