Path: csiph.com!newsfeed.xs4all.nl!newsfeed7.news.xs4all.nl!bofh.it!news.nic.it!robomod
From: David Wright <deblis@lionunicorn.co.uk>
Newsgroups: linux.debian.user
Subject: Re: How to secure access to SD cards a la USBGuard?
Date: Mon, 06 Dec 2021 17:20:02 +0100
Message-ID: <DroSC-4ej-11@gated-at.bofh.it>
References: <DimmZ-2Zd-5@gated-at.bofh.it> <DiHrr-7vX-9@gated-at.bofh.it> <DiIdR-81H-27@gated-at.bofh.it> <DiIxb-882-3@gated-at.bofh.it> <DqYYa-5wP-3@gated-at.bofh.it>
Old-Return-Path: <pdkcox@cox.net>
Reply-To: debian-user@lists.debian.org
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.10.1 (2018-07-13)
Approved: robomod@news.nic.it
Lines: 19
Organization: linux.* mail to news gateway
Sender: robomod@news.nic.it
Xref: csiph.com linux.debian.user:242726

On Sun 05 Dec 2021 at 13:33:41 (+0100), Andrei POPESCU wrote:
> On Vi, 12 nov 21, 12:27:59, Stefan Monnier wrote:
> > 
> > As mentioned, the way to control it will depend on the specific tool
> > used to mount.  E.g. if it's mounted by hand via a rule in /etc/fstab,
> > then you can rules that specify the device via /etc/disk/by-uuid.
> > 
> > Do note that partition UUIDs are not designed to be reliable w.r.t
> > malicious uses (it's easy to create a partition with the same UUID as
> > some other).
> 
> /dev/disk/by-id/ should be device specific.

It certainly is, but specific to the card reader reading it,
not the card. And that's whether the card is plugged into a
slot on the computer, or into a discrete SD/USB adapter.

Cheers,
David.