Re: Concrete ideas for the December-March OPW?

[Tobias Mueller <muelli cryptobitch de>]

Hi.

On Tue, Oct 28, 2014 at 04:39:28PM +0100, Hans Petter Jansson wrote:
> It might be a good idea to leave alone USB devices (keyboard, mouse),
> mounts and ongoing file transfers already present when the lock screen
> comes up. Would it be enough to just prevent new USB devices from being
> added? 
For now, I think, yes.
The documentation on the simple USB authorisation method can be found here:
https://www.kernel.org/doc/Documentation/usb/authorization.txt

> If so, how do we handle the case where the user tries to change
> their keyboard while the lock screen is up?
We could unconditionally allow simple HID devices.

> Would a device whitelist be
> reliable, so he could at least re-plug his old keyboard and log back in
> using that?
good idea!

Cheers,
  Tobi