Public bug reported:
[Foreword]
U2F - "universal two factor" is a recent standard to provide two factor
authentication using elliptic curve cryptography; with physical
confirmation; and authentication of both server and client identities.
This is therefore stronger than the usual 6-digit codes, and more user
friendly - just touch a button. The devices that commonly support this
are Yubikeys among other implementations. These rely on access to
/dev/hidraw device by the user account, which is typically otherwise
accessible by root only. The udev rules shipped, open up, and assign
these devices to the user seats - effectively making them "USB memory
stick" permissions wise (a local user/seat can access it, when plugging
it in). Previously these udev rules were shipped in src:systemd, but now
they have been removed upstream in favor of maintaining them in the src
:libu2f-host. On the user systems, Firefox / Chrome / Chromium have
support to use u2f devices to authenticate with Google Apps, Github,
Salesforce, Etc.
This MIR is specifically about shipping the udev rules only. It is not
about shipping the libu2f shared library that facilitates developing of
u2f enabled apps and daemons.
[Availability]
Available in universe.
[Rationale]
All Ubuntu Desktop Flavours should be able to perform U2F authentication
in a web-browser.
[Security]
udev rules only, as described in foreword, limited by vendor IDs and
model numbers.
[Quality assurance]
The package is in good shape, and there is a binary package specifically
to ship udev rules only.
[Dependencies]
none
[Standards compliance]
ok
[Maintenance]
At times, as more devices become available on the market, udev rules may
need an update, and SRUs.
foundations bugs is subscribed.
seeded into desktop-common.
[Background information]
See foreword.
** Affects: libu2f-host (Ubuntu)
Importance: Undecided
Status: New
** Tags: id-5a096cad0b33afe7dc38a9c1
** Description changed:
[Foreword]
U2F - "universal two factor" is a recent standard to provide two factor
authentication using elliptic curve cryptography; with physical
confirmation; and authentication of both server and client identities.
This is therefore stronger than the usual 6-digit codes, and more user
friendly - just touch a button. The devices that commonly support this
are Yubikeys among other implementations. These rely on access to
/dev/hidraw device by the user account, which is typically otherwise
accessible by root only. The udev rules shipped, open up, and assign
these devices to the user seats - effectively making them "USB memory
stick" permissions wise (a local user/seat can access it, when plugging
it in). Previously these udev rules were shipped in src:systemd, but now
they have been removed upstream in favor of maintaining them in the src
:libu2f-host. On the user systems, Firefox / Chrome / Chromium have
support to use u2f devices to authenticate with Google Apps, Github,
Salesforce, Etc.
This MIR is specifically about shipping the udev rules only. It is not
about shipping the libu2f shared library that facilitates developing of
u2f enabled apps and daemons.
[Availability]
Available in universe.
[Rationale]
All Ubuntu Desktop Flavours should be able to perform U2F authentication
in a web-browser.
[Security]
udev rules only, as described in foreword, limited by vendor IDs and
model numbers.
[Quality assurance]
The package is in good shape, and there is a binary package specifically
to ship udev rules only.
[Dependencies]
none
[Standards compliance]
ok
[Maintenance]
At times, as more devices become available on the market, udev rules may
need an update, and SRUs.
+ foundations bugs is subscribed.
+
+ seeded into desktop-common.
+
[Background information]
See foreword.
** Summary changed:
- [MIR] libu2f-host *UDEV RULES ONLY*
+ [MIR] libu2f-host *UDEV RULES ONLY* bin:libu2f-udev
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1757411
Title:
[MIR] libu2f-host *UDEV RULES ONLY* bin:libu2f-udev
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/libu2f-host/+bug/1757411/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
