as.gentoo Guru
Joined: 07 Aug 2004 Posts: 321
|
Posted: Thu Sep 05, 2019 11:37 pm Post subject: Is it possible to control drivers by using security modules? |
|
|
My box crashes (sys completely deadlocks except for the magic boot key) regularly since there is a problem with my VGA using the nouveau driver… Since I'm (and a few others are) a corner case there will nothing be done about it - at least that's how I understood the conversation.
So I have to use the closed source x11-drivers/nvidia-drivers
Is it possible to control/limit the drivers actions by using AppArmor/grsecurity/Smack/Tomoyo/Yama/…?
I don't know what a graphics driver could do. For example: taking screenshots or recording the screen or what's in front of the webcam and making the network driver send that somewhere over the web would be a bad thing. Somehow getting access to the keyboard input would obviously be bad as well.
I'd feel better with using the closed source driver if it could be controlled/limited by a security module. The other option is buying a new VGA that (hopefully) works without problems. However, that would be kind of wasting money since the now used VGA is very powerful.
Thanks in advance! |
|