[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]

Re: mknod: xxx: Operation not permitted



On Thu, 2004-12-16 at 09:31 +0100, Ralf Corsepius wrote:
> Hi,
> 
> Trying to create a char-device as ordinary user, results into this:
> # mknod /var/tmp/bla-1.0.0/etc/udev/devices/bla01 c 212 0
> mknod: `/var/tmp/bla-1.0.0/etc/udev/devices/bla01': Operation not permitted
> 
> Any explanation for this behavior?

yes
if you allow non-root to create a device-node, then that non-root user
automatically has access to the device. At which point the game is over,
he's effectively root.


> This issue prevents one from being able to build rpms containing special
> devices as ordinary users.

then the rpm in question is buggy.
First of all, RPM has a directive to do this properly (%device iirc),
that way it gets created in the cpio properly but doesn't have to be on
the filesystem
Second of all, it's quite suspect that you want to package a device node
in an rpm since most of them are dynamic numbers nowadays... are you
sure your device is registered with LANANA ?

Attachment: signature.asc
Description: This is a digitally signed message part


[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]