James Carlson wrote:
> As a way to illustrate the point: suppose we had a new kind of SCSI
> drive that included encryption.  Suppose that drive required new
> commands when first connected in order to establish the key in use
> (the "security relationship" between the drive and host).  Would we
> need or want a new daemon to handle that?  Or would it more naturally
> be an extension of the existing devices framework?

Thats a good example and one I've actually been doing some thinking on. 
  I think actually it might be a yes to both.  We might need a new 
daemon to do some key management tasks but we would certainly be 
plugging into the existing devices framework.

> What I'm concerned about here is that having a separate daemon to
> manage a group of devices will likely lead to even more confusion in
> the whole device allocation and permissions area.

I agree with Jim here in general.

I would have expected the WUSB to be adding a plugin to 
/usr/lib/devfsadm/linkmod/

The really important thing here is to make sure that all the existing 
frameworks continue to work since this is really a transport layer 
change.   Compare this to adding IPsec below TCP, applications didn't 
have to change and IPsec is part of IP.


-- 
Darren J Moffat

Reply via email to