Re: [PATCH 04/11] S.A.R.A. USB Filtering

2017-06-20 Thread Salvatore Mesoraca
2017-06-20 9:07 GMT+02:00 Pavel Machek : > Hmm. Given that USB device provides vendor id/product id, this does > not really stop anyone, right? > > AFAICT you can still get USB stick with vid/pid of logitech keyboard, > and kernel will recognize it as a usb stick. There are a number of ways by whi

Re: [PATCH 04/11] S.A.R.A. USB Filtering

2017-06-20 Thread Pavel Machek
On Mon 2017-06-12 18:56:53, Salvatore Mesoraca wrote: > Introduction of S.A.R.A. USB Filtering. > It uses the "usb_device_auth" LSM hook to provide a mechanism to decide > which USB devices should be authorized to connect to the system and > which shouldn't. > The main goal is to narrow the attack

[PATCH 04/11] S.A.R.A. USB Filtering

2017-06-12 Thread Salvatore Mesoraca
Introduction of S.A.R.A. USB Filtering. It uses the "usb_device_auth" LSM hook to provide a mechanism to decide which USB devices should be authorized to connect to the system and which shouldn't. The main goal is to narrow the attack surface for custom USB devices designed to exploit vulnerabiliti