> What kind of permission is needed to do a device reset?  Right now the
> default is root, right?  So unless you set your system up otherwise, we
> are ok.

True, but here goes much of the utility of usbfs.

The problem is that with usbfs as it currently is, you throw away any notion
of security if you give anybody but root write permission in usbfs on any 
device. In fact the notion of permission on a whole device is wrong.
Permissions need to be by interface and probably there needs to be an
extra set of permissions for operations on the whole device like
setting a configuration or resetting the device.
And of course we need to check that the endpoint we do things to
actually belongs to us.
Then control requests need to be filtered. We can do such nice things
as set a device to an address already in use.

        Merry Christmas
                Oliver




-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
[EMAIL PROTECTED]
To unsubscribe, use the last form field at:
https://lists.sourceforge.net/lists/listinfo/linux-usb-devel

Reply via email to