Skip to content

Reformat security levels description #80

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
lotia wants to merge 1 commit into
base: master
Choose a base branch
from
Open

Reformat security levels description #80

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
26 changes: 18 additions & 8 deletions docs/boltd.8.txt
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -24,14 +24,24 @@ PCIe. Therefore thunderbolt can achieve very high connection speeds,
fast enough to even drive external graphics cards. The downside is
that it also makes certain attacks possible. To mitigate these
security problems, the latest version -- known as Thunderbolt 3 --
supports different *security levels*: 'none': No security. The
behavior is identical to previous Thunderbolt versions. 'dponly': No
PCIe tunnels are created at all, but DisplayPort tunnels are allowed
and will work. 'user': Connected devices must be authorized by the
user. Only then will the PCIe tunnels be activated. 'secure':
Basically the same as user mode, but additionally a key will be
written to the device the first time the device is connected. This key
will then be used to verify the identity of the connected device.
supports different *security levels*:

*none*::
No security. The behavior is identical to previous Thunderbolt
versions.

*dponly*::
No PCIe tunnels are created at all, but DisplayPort tunnels are allowed
and will work.

*user*::
Connected devices must be authorized by the user. Only then will the
PCIe tunnels be activated.

*secure*::
Basically the same as user mode, but additionally a key will be written
to the device the first time the device is connected. This key will
then be used to verify the identity of the connected device.

The primary task of *boltd* is to authorize thunderbolt peripherals if
the security level is either `user` or `secure`. It provides a D-Bus
Expand Down