Re: [PATCH] dmi: export dmi data through debugfs

[Jean Delvare]

Hi Olaf,

On Tue, 28 Sep 2010 16:12:46 -0500, Olof Johansson wrote:
> I've found this quite useful since it allows dmidecode to run without
> root privileges using --from-dump to read this file instead

This is a bad idea. We do NOT want every user to have access to all the
DMI information. There is sensitive information in there (serial
numbers and UUIDs, and possibly even more sensitive data in
OEM-specific records.) If you look in /sys/class/dmi/id/, you'll see
that files board_serial, chassis_serial, product_serial and
product_uuid are only readable by root exactly for this reason.

So this is a NACK from me, sorry.

-- 
Jean Delvare
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/