Gentoo Archives: gentoo-dev

From: Douglas Freed <dwfreed@×××.edu>
To: gentoo-dev@l.g.o
Subject: Re: [gentoo-dev] Lastrite: Firmware cleanup, part #1
Date: Sun, 10 Feb 2013 23:12:17
Message-Id: CAFyXEpL-E3Sq9UEyOq3C+k7eJoHM3BmLdbBEgOc9pHc0XUcv8w@mail.gmail.com
In Reply to: Re: [gentoo-dev] Lastrite: Firmware cleanup, part #1 by Maxim Kammerer
1 > Combined with various less-than-free licenses, installing one huge blob of
2 > firmware is problematic for many users, also from a security point of
3 view.
4
5 How does having additional firmware installed affect security at all?
6 Firmware is only loaded when specifically requested by a loaded driver that
7 needs to use it, and only if that driver is actually in use. That's like
8 saying a file that can only be written to by root, only normally read when
9 it's specifically needed, and if for some stupid reason is executed by an
10 unprivileged process will just result in a crash, affects security (hint: I
11 just described firmware).
12
13 -Doug

Replies

Subject Author
Re: [gentoo-dev] Lastrite: Firmware cleanup, part #1 Maxim Kammerer <mk@×××.su>