Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.kernel > #1314413

Re: [kernel-hardening] 2015 kernel CVEs

Show all headers | View raw

[Multipart message — attachments visible in raw view] - view raw

On Wed, 2016-01-20 at 10:04 -0800, Greg KH wrote:
> On Wed, Jan 20, 2016 at 05:05:39PM +0000, Ben Hutchings wrote:
> > On Tue, 2016-01-19 at 09:54 -0800, Greg KH wrote:
> > > On Tue, Jan 19, 2016 at 04:32:08PM +0000, Ben Hutchings wrote:
> > > > As for USB descriptors, I'm somewhat more hopeful about hardening.  At
> > > > the same time, it seems like it should be practical to put more low-
> > > > performance USB drivers into userspace.
> > > 
> > > What drivers do we currently have in the kernel that should/could be
> > > done in userspace instead?  I'll gladly drop them from the tree.
> > 
> > An obvious example would be HID drivers.  (I'll grant you that putting
> > those in user-space would complicate the boot process when a disk
> > encryption passphrase is needed.)
> 
> That and for userspace that expects to get an input device stream,
> combining serial, ps2, bluetooth, and USB devices all at the same time.
> So while it might be possible, keeping input devices and HID support in
> the kernel makes sense.
[...]

I was thinking that the HID drivers would feed events back into the
kernel through an enhanced version of evdev_write().  The userland
consumers of input events wouldn't need to change at all.

Ben.

-- 
Ben Hutchings
Horngren's Observation:
                   Among economists, the real world is often a special case.

Back to linux.kernel | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

2015 kernel CVEs Dan Carpenter <dan.carpenter@oracle.com> - 2016-01-19 14:40 +0100
  Re: 2015 kernel CVEs One Thousand Gnomes <gnomes@lxorguk.ukuu.org.uk> - 2016-01-19 16:00 +0100
  Re: [kernel-hardening] 2015 kernel CVEs Ben Hutchings <ben@decadent.org.uk> - 2016-01-19 17:40 +0100
    Re: [kernel-hardening] 2015 kernel CVEs Greg KH <greg@kroah.com> - 2016-01-19 19:00 +0100
      Re: [kernel-hardening] 2015 kernel CVEs Ben Hutchings <ben@decadent.org.uk> - 2016-01-20 18:10 +0100
        Re: [kernel-hardening] 2015 kernel CVEs Greg KH <greg@kroah.com> - 2016-01-20 19:10 +0100
          Re: [kernel-hardening] 2015 kernel CVEs Jiri Kosina <jikos@kernel.org> - 2016-01-21 17:10 +0100
          Re: [kernel-hardening] 2015 kernel CVEs Ben Hutchings <ben@decadent.org.uk> - 2016-01-21 19:50 +0100
  Re: 2015 kernel CVEs Peter Hurley <peter@hurleysoftware.com> - 2016-01-19 18:00 +0100
    Re: 2015 kernel CVEs Josh Boyer <jwboyer@fedoraproject.org> - 2016-01-19 18:10 +0100
      Re: 2015 kernel CVEs Greg KH <gregkh@linuxfoundation.org> - 2016-01-19 19:00 +0100
        Re: [kernel-hardening] Re: 2015 kernel CVEs Marcus Meissner <meissner@suse.de> - 2016-01-20 08:20 +0100
  Re: 2015 kernel CVEs Al Viro <viro@ZenIV.linux.org.uk> - 2016-01-19 19:10 +0100
    Re: [kernel-hardening] Re: 2015 kernel CVEs ebiederm@xmission.com (Eric W. Biederman) - 2016-01-20 00:00 +0100
  Re: [kernel-hardening] 2015 kernel CVEs ebiederm@xmission.com (Eric W. Biederman) - 2016-01-20 00:00 +0100
    Re: [kernel-hardening] 2015 kernel CVEs Jann Horn <jann@thejh.net> - 2016-01-20 21:20 +0100
      Re: [kernel-hardening] 2015 kernel CVEs One Thousand Gnomes <gnomes@lxorguk.ukuu.org.uk> - 2016-01-20 22:30 +0100
  Re: [kernel-hardening] 2015 kernel CVEs Kees Cook <keescook@chromium.org> - 2016-01-20 00:40 +0100
  Re: 2015 kernel CVEs Miroslav Benes <mbenes@suse.cz> - 2016-01-20 11:00 +0100

csiph-web