Re: [opensuse-arm] Raspberry Pi 4 Model B
Am Donnerstag, den 26.09.2019, 10:14 +0200 schrieb Nicolas Saenz Julienne:
Hi,
[ Added Oliver as he's the most knowlegable with USB ]
SLES doesn't support USB gadget mode AFAIK, so I didn't do anything there.
Hmm, looks like it should be changed, no?
SLE has CONFIG_USB_GADGET=n, so doing that would be a rather big change which needs discussion. It's not just a module which can be marked as unsupported. I don't know whether any platform currently supported by SLE even has USB device controllers.
Cheers, Fabian
Currently SLE has CONFIG_USB_GADGET=n.
I tried to enable CONFIG_USB_GADGET some time ago. IIRC There were some concerns that we had nothing to test it on intel boards (some support it, but it's rare). On top of that there are security implications to take into account.
Correct. And the security implications make me very nervous. That direction is not tested or spoofed for security. Regards Oliver -- To unsubscribe, e-mail: opensuse-arm+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-arm+owner@opensuse.org
On Donnerstag, 26. September 2019 10:52:08 CEST Oliver Neukum wrote:
Am Donnerstag, den 26.09.2019, 10:14 +0200 schrieb Nicolas Saenz
Julienne:
Hi,
[ Added Oliver as he's the most knowlegable with USB ]
SLES doesn't support USB gadget mode AFAIK, so I didn't do anything there.
Hmm, looks like it should be changed, no?
SLE has CONFIG_USB_GADGET=n, so doing that would be a rather big change which needs discussion. It's not just a module which can be marked as unsupported. I don't know whether any platform currently supported by SLE even has USB device controllers.
Cheers, Fabian
Currently SLE has CONFIG_USB_GADGET=n.
I tried to enable CONFIG_USB_GADGET some time ago. IIRC There were some concerns that we had nothing to test it on intel boards (some support it, but it's rare). On top of that there are security implications to take into account.
Correct. And the security implications make me very nervous. That direction is not tested or spoofed for security.
Regards Oliver
Can someone please outline what these security implications are? 1. Without further configurations from userspace, no endpoints/functions are provided. 2. Contrary to e.g. Firewire and Thunderbolt, USB does not allow Remote DMA, but FW and TB are both enabled. Kind regards, Stefan -- Stefan Brüns / Bergstraße 21 / 52062 Aachen home: +49 241 53809034 mobile: +49 151 50412019
Am Mittwoch, den 02.10.2019, 00:47 +0200 schrieb Stefan Brüns :
On Donnerstag, 26. September 2019 10:52:08 CEST Oliver Neukum wrote:
Am Donnerstag, den 26.09.2019, 10:14 +0200 schrieb Nicolas Saenz
Julienne:
Hi,
[ Added Oliver as he's the most knowlegable with USB ]
SLES doesn't support USB gadget mode AFAIK, so I didn't do anything there.
Hmm, looks like it should be changed, no?
SLE has CONFIG_USB_GADGET=n, so doing that would be a rather big change which needs discussion. It's not just a module which can be marked as unsupported. I don't know whether any platform currently supported by SLE even has USB device controllers.
Cheers, Fabian
Currently SLE has CONFIG_USB_GADGET=n.
I tried to enable CONFIG_USB_GADGET some time ago. IIRC There were some concerns that we had nothing to test it on intel boards (some support it, but it's rare). On top of that there are security implications to take into account.
Correct. And the security implications make me very nervous. That direction is not tested or spoofed for security.
Regards Oliver
Can someone please outline what these security implications are?
1. Without further configurations from userspace, no endpoints/functions are provided. 2. Contrary to e.g. Firewire and Thunderbolt, USB does not allow Remote DMA, but FW and TB are both enabled.
Basically we would have to check all gadget bugs for secrity implications. And the gadget code is reviewed less than device driver code. That is not an absolute objection. The gadget system is sensily designed. But we would lower our guards temporarily. Regards Oliver -- To unsubscribe, e-mail: opensuse-arm+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-arm+owner@opensuse.org
participants (2)
-
Oliver Neukum -
Stefan Brüns