Re: [PATCH v2 2/6] driver core: Add common support to skip probe for un-authorized devices
From: "Michael S. Tsirkin" <mst@redhat.com>
Date: 2021-09-30 14:58:22
Also in:
linux-pci, linux-usb, lkml
On Thu, Sep 30, 2021 at 10:43:05AM -0400, Alan Stern wrote:
I don't see any point in talking about "untrusted drivers". If a driver isn't trusted then it doesn't belong in your kernel. Period. When you load a driver into your kernel, you are implicitly trusting it (aside from limitations imposed by security modules).
Trusting it to do what? Historically a ton of drivers did not validate input from devices they drive. Most still don't.
The code it contains, the module_init code in particular, runs with full superuser permissions.
-- MST _______________________________________________ Virtualization mailing list Virtualization@lists.linux-foundation.org https://lists.linuxfoundation.org/mailman/listinfo/virtualization