aboutsummaryrefslogtreecommitdiffstats
path: root/Documentation/usb
diff options
context:
space:
mode:
authorGreg Kroah-Hartman <gregkh@linuxfoundation.org>2015-08-18 12:57:15 -0400
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>2015-08-18 12:57:15 -0400
commitdba3398381dd1175c74721c97d1daf8fc5939276 (patch)
tree2cc22ff580a687b7f2274c6b24eb4aabf6bd36e2 /Documentation/usb
parenta1b93ab71587b8b44d45d114937cb4e75f9a5f27 (diff)
Revert "usb: interface authorization: Documentation part"
This reverts commit 6ef2bf71764708f7c58ee9300acd8df05dbaa06f as the signed-off-by address is invalid. Cc: Stefan Koch <stefan.koch10@gmail.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Diffstat (limited to 'Documentation/usb')
-rw-r--r--Documentation/usb/authorization.txt34
1 files changed, 0 insertions, 34 deletions
diff --git a/Documentation/usb/authorization.txt b/Documentation/usb/authorization.txt
index 020cec5585ce..c069b6884c77 100644
--- a/Documentation/usb/authorization.txt
+++ b/Documentation/usb/authorization.txt
@@ -3,9 +3,6 @@ Authorizing (or not) your USB devices to connect to the system
3 3
4(C) 2007 Inaky Perez-Gonzalez <inaky@linux.intel.com> Intel Corporation 4(C) 2007 Inaky Perez-Gonzalez <inaky@linux.intel.com> Intel Corporation
5 5
6Interface authorization part:
7 (C) 2015 Stefan Koch <skoch@suse.de> SUSE LLC
8
9This feature allows you to control if a USB device can be used (or 6This feature allows you to control if a USB device can be used (or
10not) in a system. This feature will allow you to implement a lock-down 7not) in a system. This feature will allow you to implement a lock-down
11of USB devices, fully controlled by user space. 8of USB devices, fully controlled by user space.
@@ -93,34 +90,3 @@ etc, but you get the idea. Anybody with access to a device gadget kit
93can fake descriptors and device info. Don't trust that. You are 90can fake descriptors and device info. Don't trust that. You are
94welcome. 91welcome.
95 92
96
97Interface authorization
98-----------------------
99There is a similar approach to allow or deny specific USB interfaces.
100That allows to block only a subset of an USB device.
101
102Authorize an interface:
103$ echo 1 > /sys/bus/usb/devices/INTERFACE/authorized
104
105Deauthorize an interface:
106$ echo 0 > /sys/bus/usb/devices/INTERFACE/authorized
107
108The default value for new interfaces
109on a particular USB bus can be changed, too.
110
111Allow interfaces per default:
112$ echo 1 > /sys/bus/usb/devices/usbX/interface_authorized_default
113
114Deny interfaces per default:
115$ echo 0 > /sys/bus/usb/devices/usbX/interface_authorized_default
116
117Per default the interface_authorized_default bit is 1.
118So all interfaces would authorized per default.
119
120Note:
121If a deauthorized interface will be authorized so the driver probing must
122be triggered manually by writing INTERFACE to /sys/bus/usb/drivers_probe
123
124For drivers that need multiple interfaces all needed interfaces should be
125authroized first. After that the drivers should be probed.
126This avoids side effects.