On Fri, 12 Jul 2013, Hans de Goede wrote:

> For certain (HP) printers the printer device_id does not only contain a
> static part identifying the printer, but it also contains a dynamic part
> giving printer status, ink level, etc.
> 
> To get to this info various userspace utilities need to be able to make a
> printer class 'get_device_id' request without first claiming the interface
> (as that is in use for the actual printer driver).
> 
> Since the printer class 'get_device_id' request does not change interface
> settings in anyway, allowing this without claiming the interface should not
> cause any issues.

Are there any security implications to allowing any user on the system
to send a get_device_id request to a printer while it is in the middle
of a print job?

Alan Stern

--
To unsubscribe from this list: send the line "unsubscribe linux-usb" in
the body of a message to majord...@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html

Reply via email to