Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1030517AbbDWSEh (ORCPT ); Thu, 23 Apr 2015 14:04:37 -0400 Received: from mail-ig0-f177.google.com ([209.85.213.177]:33887 "EHLO mail-ig0-f177.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1030210AbbDWSEg (ORCPT ); Thu, 23 Apr 2015 14:04:36 -0400 MIME-Version: 1.0 In-Reply-To: References: <20150413190350.GA9485@kroah.com> <20150423130548.GA4253@kroah.com> <20150423163616.GA10874@kroah.com> <20150423171640.GA11227@kroah.com> Date: Thu, 23 Apr 2015 11:04:36 -0700 X-Google-Sender-Auth: yL2SpaPEYzue64Ddvcqm-Bz8NK0 Message-ID: Subject: Re: [GIT PULL] kdbus for 4.1-rc1 From: Linus Torvalds To: Greg Kroah-Hartman Cc: Andy Lutomirski , Andrew Morton , Arnd Bergmann , "Eric W. Biederman" , One Thousand Gnomes , Tom Gundersen , Jiri Kosina , "linux-kernel@vger.kernel.org" , Daniel Mack , David Herrmann , Djalal Harouni Content-Type: text/plain; charset=UTF-8 Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 1507 Lines: 36 On Thu, Apr 23, 2015 at 10:57 AM, Linus Torvalds wrote: > > If somebody is printing something, it shouldn't matter if it's "lpr" > or "firefox http://horses.and.trannyporn.my.little.pony.com/" that > does the printing. And btw, it's not just "this is information that shouldn't be logged". It's literally "information that should not *ever* be used". I can easily see some phone manufacturer deciding to do "value add" by adding a special case where a special vendor system manager program gets a back door to some service, because it needs to access the camera for user identification at login time, so there's some magic if (!strcmp(client->pid_comm, "vendor-login-pr")) return ACCESS_OK; because "it was the simplest way to do this", and the programmer knew it was a hack, but he needed to get it working because he had a deadline yesterday. And then somebody figures this out, and makes an app that takes pictures on your phone surreptitiously. No, we can't protect against vendors doing stupid things, but we very much also shouldn't make the kernel have interfaces that basically encourage people to do stupid things because they make irrelevant and wrongheaded data available. Linus -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/