On Sat, 16 Jun 2018, Pavel Machek wrote: > Question is if we want flexibility or security. For thinkpad-acpi, it is security by default. Flexibility is allowed as *compile*-time (Kconfig) option, and only as long as it defaults to secure *and* the help text is very explicit at instructing distros to NOT enable this option. That said, if mic-mute is under HDA mixer control, it will only be "secure" if ALSA is also blocking userspace access to the relevant bits, and if that is not possible to do properly, might as well go for flexibility. But only in that case. That would be why I use phisical shutters on embedded webcams unless the hardware actually airgaps them from the USB bus when the privacy switch is active. -- Henrique Holschuh
