Page MenuHomeFreeBSD

Add u2f(4), a HID driver for FIDO/U2F security keys
AbandonedPublic

Authored by wulf on Jul 28 2025, 9:32 PM.
Tags
None
Referenced Files
F164835061: D51610.diff
Tue, Aug 4, 6:32 AM
Unknown Object (File)
Tue, Aug 4, 2:54 AM
Unknown Object (File)
Mon, Aug 3, 3:30 AM
Unknown Object (File)
Wed, Jul 29, 6:04 PM
Unknown Object (File)
Wed, Jul 29, 12:31 AM
Unknown Object (File)
Mon, Jul 27, 2:08 AM
Unknown Object (File)
Sun, Jul 26, 12:46 PM
Unknown Object (File)
Sat, Jul 25, 8:30 AM

Details

Reviewers
emaste
manu
andrew
Summary

While FIDO/U2F keys were already supported by the generic uhid(4) and
hidraw(4) drivers, this driver adds some additional features an does
steps to tighten the security of FIDO/U2F access.

  • It automatically loads through devd.
  • Automatically enables HQ_NO_READAHEAD for FIDO/U2F devices.
  • Implements only miminum set of features.
  • Do not requires external devfs configuration to set character device permissions.
  • Names character device as u2f/# to make possible capsicum or any other pledge()-style sandboxing.

PR: 265528
MFC after: 1 week

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Skipped
Unit
Tests Skipped
Build Status
Buildable 65821
Build 62704: arc lint + arc unit