BadUSB - On Accessories that Turn Evil, by Karsten Nohl + Jakob Lell

[Hans Petter Selasky]

On 10/22/14 03:09, Dewayne Geraghty wrote:
> Hans,
> Thank-you for these enhancements, as its good to have something in the
> armoury to try to address this issue.
>
> I applied the patch
> https://lists.freebsd.org/pipermail/svn-src-head/2014-October/063443.html  to
> an updated 10.Stable overnight.  Disabling enumeration works as
> described above except that, placing the following in loader.conf has no
> effect?
> --- tail of /boot/loader.conf ---
> # 20141022 Didn't work as expected
> #dev.uhub.0.disable_enumeration="1"
> #dev.uhub.1.disable_enumeration="1"
> #dev.uhub.2.disable_enumeration="1"
> #dev.uhub.3.disable_enumeration="1"
> #dev.uhub.4.disable_enumeration="1"
>
> # 20141022 Also didn't work
> hw.usb.disable_enumeration="1"
> --- end of /boot/loader.conf ---

Hi,

The /boot/loader.conf only works in -current, because in 10-stable 
SYSCTLs cannot be automatically loaded from TUNABLEs. You would need to 
add some TUNABLE() statements for that.

--HPS