Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 09 Mar 2006 11:11:40 -0800
From:      Maksim Yevmenkin <maksim.yevmenkin@savvis.net>
To:        Iain Hibbert <plunky@rya-online.net>
Cc:        freebsd-bluetooth@FreeBSD.org
Subject:   Re: apple bluetooth keyboard
Message-ID:  <44107DEC.4060902@savvis.net>
In-Reply-To: <1141894332.239191.546.nullmailer@galant.ukfsn.org>
References:  <440DCFF0.6090809@savvis.net> <1141761895.037384.5308.nullmailer@galant.ukfsn.org> <440DF38F.7020707@savvis.net> <1141772196.551930.3681.nullmailer@galant.ukfsn.org> <440E1988.10202@savvis.net> <1141779342.768110.17808.nullmailer@galant.ukfsn.org> <440E31E7.9050409@savvis.net> <1141894332.239191.546.nullmailer@galant.ukfsn.org>

next in thread | previous in thread | raw e-mail | index | archive | help
Iain Hibbert wrote:
> On Tue, 7 Mar 2006, Maksim Yevmenkin wrote:
> 
>>Iain Hibbert wrote:
>>
>>>baseband connection, then 'red' can access the device through another
>>>L2CAP or RFCOMM socket (well, they can in my world :)
>>
>>you can do it with freebsd. i can open baseband by hand (as root) and then do
>>sdp query and/or rfcomm session as another user. i'm not following you here.
> 
> My thought is exactly that. Once a device is authenticated, there is no
> way to restrict user access. User 'blue' might wish to copy pictures from
> his mobile phone, but that does not necessarily mean that user 'red'
> should be able to send a fax to a premium rate number..

well, this is the wrong protocol layer to implement this kind of 
restrictions. you simply do not have enough information to make a proper 
decision. it is up to the services themselves to verify user credentials 
  and allow (or deny) access to the service.

obex, for example, has built-in authentication facility. and, in theory, 
it is possible to authenticate obex requests (much like http).

serial port profile, on the other hand, does not have built-in 
authentication facility.

bluetooth is obviously positioned for personal use. so, "single pin code 
gives access to all services" model works here.

> I am ignoring this issue for now though, its too complex and I just want
> to get it working (which it does, I did some internet surfing at 9600bps
> for a while yesterday :)

cool!

thanks,
max



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?44107DEC.4060902>