Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.user > #242723

Re: How to secure access to SD cards a la USBGuard?

Path csiph.com!newsfeed.xs4all.nl!newsfeed9.news.xs4all.nl!bofh.it!news.nic.it!robomod
From David Wright <deblis@lionunicorn.co.uk>
Newsgroups linux.debian.user
Subject Re: How to secure access to SD cards a la USBGuard?
Date Mon, 06 Dec 2021 17:20:02 +0100
Message-ID <DroSB-4ej-3@gated-at.bofh.it> (permalink)
References <DimmZ-2Zd-5@gated-at.bofh.it> <DiHrr-7vX-9@gated-at.bofh.it> <DiIdR-81H-27@gated-at.bofh.it> <DiIxb-882-3@gated-at.bofh.it> <DqYYa-5wP-3@gated-at.bofh.it> <DqZAS-5Zu-9@gated-at.bofh.it>
X-Mailbox-Line From debian-user-request@lists.debian.org Mon Dec 6 16:19:04 2021
Old-Return-Path <pdkcox@cox.net>
X-Amavis-Spam-Status No, score=-6.651 tagged_above=-10000 required=5.3 tests=[BAYES_00=-2, FOURLA=0.1, HEADER_FROM_DIFFERENT_DOMAINS=0.249, LDO_WHITELIST=-5, RCVD_IN_DNSWL_NONE=-0.0001] autolearn=ham autolearn_force=no
X-Policyd-Weight using cached result; rate: -5.5
Authentication-Results cox.net; auth=pass (PLAIN) smtp.auth=pdkcox@cox.net
X-Authority-Analysis v=2.4 cv=OaWLszfY c=1 sm=1 tr=0 ts=61ae37e1 a=Lgkz+srVTlLlCuK1Y0XrAg==:117 a=Lgkz+srVTlLlCuK1Y0XrAg==:17 a=HtVkLTzhq2sJd-Zd:21 a=IkcTkHD0fZMA:10 a=WWAyy6ZruSes-PVfpDoA:9 a=QEXdDO2ut3YA:10 a=rACBFbLkZFAfLVCtCu9t:22
Reply-To debian-user@lists.debian.org
MIME-Version 1.0
Content-Type text/plain; charset=utf-8
Content-Disposition inline
Content-Transfer-Encoding 8bit
User-Agent Mutt/1.10.1 (2018-07-13)
X-Cmae-Envelope MS4xfD46sdNrM6V21jxh/D8glBY8XM9RT1eI0Xh22dBFiTeJ5L3rC1W9u/rEg37qdYtoUAtjQSZOsuFHjthxvEMMk9YN2KpsAvgn//8mxpJ68Pvu9NexmUQG lrhoIUxWgcmrZ9UYVBa+oRty8qvoZQNAoUy+VwS8qYaUwCR3zVngYBlSVrmYQytOc67hDnSHoqYaQIsvOcggvr1XXy/qWZVI1MoRDVzSuHZhXLC3BIlT9SAa xDTX0qDeG2Fdpgv5JlsXEfHJyacKCi5y/Z/opRJM7P0=
X-Mailing-List <debian-user@lists.debian.org> archive/latest/783496
List-ID <debian-user.lists.debian.org>
List-URL <https://lists.debian.org/debian-user/>
List-Archive https://lists.debian.org/msgid-search/20211206161838.GC5554@axis.corp
Approved robomod@news.nic.it
Lines 30
Organization linux.* mail to news gateway
Sender robomod@news.nic.it
X-Original-Date Mon, 6 Dec 2021 10:18:38 -0600
X-Original-Message-ID <20211206161838.GC5554@axis.corp>
X-Original-References <b642c779-e4ed-7de1-a28c-6d0ef8a20c5a@gmail.com> <jwvwnld8iuj.fsf-monnier+gmane.linux.debian.user@gnu.org> <32bfedbe-c0a3-dbcf-0afd-935d40d41081@gmail.com> <jwvr1bl8fj9.fsf-monnier+gmane.linux.debian.user@gnu.org> <20211205123341.zq7hkx6pz6ccazai@acr13.nuvreauspam> <f767dd4d-9615-a6ab-d5e9-4326aa2d9747@gmail.com>
Xref csiph.com linux.debian.user:242723

Show key headers only | View raw


On Sun 05 Dec 2021 at 14:11:25 (+0100), hdv@gmail wrote:
> On 2021-12-05 13:33, Andrei POPESCU wrote:
> > On Vi, 12 nov 21, 12:27:59, Stefan Monnier wrote:
> > > 
> > > As mentioned, the way to control it will depend on the specific tool
> > > used to mount.  E.g. if it's mounted by hand via a rule in /etc/fstab,
> > > then you can rules that specify the device via /etc/disk/by-uuid.
> > > 
> > > Do note that partition UUIDs are not designed to be reliable w.r.t
> > > malicious uses (it's easy to create a partition with the same UUID as
> > > some other).
> > 
> > /dev/disk/by-id/ should be device specific.
> 
> Shoot, I had forgotten about WWNs at all! Yep, those should be good
> enough for my purposes.

I make a habit of archiving the udevadm info, or /run/udev/data/b8:NN
files, for all my disks, sticks and cards. I can't find any WWNs that
are not on either spinning drives or my (sole) SSD. Even my oldest
hard drive (early-2007) lacks one. So I'm interested to know how/where
you read them from on SD cards. Is this a new thing with SDXC/SDUC?

I use LABELs and "UUIDs" (Serial Numbers) to identify mine. LABELs are
most use; for example, I have a Nokia phone that writes a new Serial
Number on any µSD card that's inserted. I have no idea why.
It's obviously only useful in a cooperative environment.

Cheers,
David.

Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread


Thread

How to secure access to SD cards a la USBGuard? "hdv@gmail" <hdv.jadev@gmail.com> - 2021-11-11 18:50 +0100
  Re: How to secure access to SD cards a la USBGuard? Stefan Monnier <monnier@iro.umontreal.ca> - 2021-11-12 17:20 +0100
    Re: How to secure access to SD cards a la USBGuard? "hdv@gmail" <hdv.jadev@gmail.com> - 2021-11-12 18:10 +0100
      Re: How to secure access to SD cards a la USBGuard? Stefan Monnier <monnier@iro.umontreal.ca> - 2021-11-12 18:30 +0100
        Re: How to secure access to SD cards a la USBGuard? Andrei POPESCU <andreimpopescu@gmail.com> - 2021-12-05 13:40 +0100
          Re: How to secure access to SD cards a la USBGuard? "hdv@gmail" <hdv.jadev@gmail.com> - 2021-12-05 14:20 +0100
            Re: How to secure access to SD cards a la USBGuard? David Wright <deblis@lionunicorn.co.uk> - 2021-12-06 17:20 +0100
          Re: How to secure access to SD cards a la USBGuard? David Wright <deblis@lionunicorn.co.uk> - 2021-12-06 17:20 +0100
            Re: How to secure access to SD cards a la USBGuard? Andrei POPESCU <andreimpopescu@gmail.com> - 2021-12-10 17:30 +0100
              Re: How to secure access to SD cards a la USBGuard? David Wright <deblis@lionunicorn.co.uk> - 2022-01-03 04:00 +0100
                Re: How to secure access to SD cards a la USBGuard? Andrei POPESCU <andreimpopescu@gmail.com> - 2022-01-11 12:50 +0100
                Re: How to secure access to SD cards a la USBGuard? "hdv@gmail" <hdv.jadev@gmail.com> - 2022-01-11 17:50 +0100

csiph-web