Dasharo
PS/2 keyboard for dasharo/heads
The problem you're addressing (if any)
At the moment, the PS/2 keyboard is disabled under the dasharo/heads. This force users to use unsafe usb-keyboard set up, thereby increasing a surface attack. msi_z690a_ddr4.config file, line 33: export CONFIG_USB_KEYBOARD=y. coreboot-msi_z690a_ddr4.config file, line 639: # CONFIG_DRIVERS_PS2_KEYBOARD is not set
Describe the solution you'd like
Please enable the PS/2 keyboard as it is most likely the case for dasharo/coreboot.
Where is the value to a user, and who might that user be?
- For users under Qubes it will mitigate significant security risks coming from USB input devices.
- Also some users enjoying gaming may have slightly faster a mouse/keyboard response because of 'polling' when USB-keyboard is used.
Describe alternatives you've considered
Alternative strategy is to develop a package and install it into dom0 (which is not best option) that would limit the input speed for hid/USB input devices. It will perhaps reduce but not mitigate the risk of badusb attacks.
Additional context
No response
I built dasharo/coreboot with heads (using msi_ms7e06_v0.9.0).
Before building I changed this line: https://github.com/Dasharo/heads/blob/msi_ms7e06_v0.9.0/config/coreboot-msi_z790p_ddr5.config#L640
Line 640 in the config for that board to:
CONFIG_DRIVERS_PS2_KEYBOARD=y
Can confirm that PS/2 Keyboard now works in Heads as well as in Qubes OS when it did not work before doing this.
@scallyob great, thanks for testing. However, as the heads product on MSI desktops is discontinued (meaning we don't plan to provide new release for it), everybody will have to rebuild their ROMs themselves to fix it :(
