Skip to content

Don't deny smartcards in usb-policy.conf#6965

Merged
last-genius merged 1 commit intoxapi-project:masterfrom
dinhngtu:dev/dnt/smartcard
Mar 23, 2026
Merged

Don't deny smartcards in usb-policy.conf#6965
last-genius merged 1 commit intoxapi-project:masterfrom
dinhngtu:dev/dnt/smartcard

Conversation

@dinhngtu
Copy link
Contributor

Removing this device class from the USB config would let admins configure VMs for digital signing purposes.

These devices are also not very useful in Dom0.

Removing this device class from the USB config would let admins
configure VMs for digital signing purposes.

These devices are also not very useful in Dom0.

Signed-off-by: Tu Dinh <ngoc-tu.dinh@vates.tech>
@edwintorok
Copy link
Member

I don't see why smartcards were added to usb-policy.conf in the first place. All I can find is that this was a suggested default that was used by another application (but that was a client application, so it might've made sense there because you may want to use the smartcard locally instead of remotely; and not a server)

@last-genius
Copy link
Contributor

last-genius commented Mar 23, 2026

@dinhngtu Could you backport this commit to 26.1-lcm in a separate PR (like here, for example: #6953)? If not, we can do it as well

@last-genius last-genius added this pull request to the merge queue Mar 23, 2026
Merged via the queue into xapi-project:master with commit e7c6f6e Mar 23, 2026
16 checks passed
@dinhngtu dinhngtu deleted the dev/dnt/smartcard branch March 23, 2026 09:28
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants