Page MenuHomeFreeBSD

Add u2f(4), a HID driver for FIDO/U2F security keys
AbandonedPublic

Authored by wulf on Jul 28 2025, 9:32 PM.
Tags
None
Referenced Files
Unknown Object (File)
Tue, May 12, 9:26 AM
Unknown Object (File)
Mon, May 11, 9:56 AM
Unknown Object (File)
Tue, Apr 28, 7:25 AM
Unknown Object (File)
Thu, Apr 23, 2:19 AM
Unknown Object (File)
Tue, Apr 21, 8:23 AM
Unknown Object (File)
Apr 7 2026, 9:16 PM
Unknown Object (File)
Apr 4 2026, 2:16 PM
Unknown Object (File)
Mar 11 2026, 1:12 PM

Details

Reviewers
emaste
manu
andrew
Summary

While FIDO/U2F keys were already supported by the generic uhid(4) and
hidraw(4) drivers, this driver adds some additional features an does
steps to tighten the security of FIDO/U2F access.

  • It automatically loads through devd.
  • Automatically enables HQ_NO_READAHEAD for FIDO/U2F devices.
  • Implements only miminum set of features.
  • Do not requires external devfs configuration to set character device permissions.
  • Names character device as u2f/# to make possible capsicum or any other pledge()-style sandboxing.

PR: 265528
MFC after: 1 week

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Skipped
Unit
Tests Skipped
Build Status
Buildable 65821
Build 62704: arc lint + arc unit