[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: How to secure access to SD cards a la USBGuard?



On Lu, 06 dec 21, 10:18:49, David Wright wrote:
> On Sun 05 Dec 2021 at 13:33:41 (+0100), Andrei POPESCU wrote:
> > On Vi, 12 nov 21, 12:27:59, Stefan Monnier wrote:
> > > 
> > > As mentioned, the way to control it will depend on the specific tool
> > > used to mount.  E.g. if it's mounted by hand via a rule in /etc/fstab,
> > > then you can rules that specify the device via /etc/disk/by-uuid.
> > > 
> > > Do note that partition UUIDs are not designed to be reliable w.r.t
> > > malicious uses (it's easy to create a partition with the same UUID as
> > > some other).
> > 
> > /dev/disk/by-id/ should be device specific.
> 
> It certainly is, but specific to the card reader reading it,
> not the card. And that's whether the card is plugged into a
> slot on the computer, or into a discrete SD/USB adapter.

At least with the built-in reader on an Acer Chromebook R13 the ID 
changes with every card I tested, but you are indeed right about USB 
adapters (at least for the two I could test).


Kind regards,
Andrei
-- 
http://wiki.debian.org/FAQsFromDebianUser

Attachment: signature.asc
Description: PGP signature


Reply to: