# Re: \[PATCH v2 2/6\] driver core: Add common support to skip probe for un-authorized devices

- From: Michael S. Tsirkin \<mst@redhat.com\>
- Date: 2021-09-30 14:58:22 
- List: linux-usb
- Page: https://ratatoskr.run/linux-usb/2021/09/1527201
- Thread: https://ratatoskr.run/linux-pci/2021/09/1526447/t.md

```text
On Thu, Sep 30, 2021 at 10:43:05AM -0400, Alan Stern wrote:
> I don't see any point in talking about "untrusted drivers".  If a 
> driver isn't trusted then it doesn't belong in your kernel.  Period.  
> When you load a driver into your kernel, you are implicitly trusting 
> it (aside from limitations imposed by security modules).

Trusting it to do what? Historically a ton of drivers did not
validate input from devices they drive. Most still don't.

> The code 
> it contains, the module_init code in particular, runs with full 
> superuser permissions.

-- 
MST

```