ownership of devices

Bill Nottingham notting at redhat.com
Tue Sep 20 16:03:59 UTC 2005


Thomas Vander Stichele (thomas at apestaart.org) said: 
> > > I seem to recall a long-winded discussion about the fedora-usermgmt
> > > package. Perhaps it's time to move it into Core and make it responsible
> > > for creating the groups if needed.
> > 
> > Dynamically modified groups + setgid programs are a poor solution for
> > device access.
> > 
> > Runtime ACLs done via HAL is probably a better solution - I remember
> > Colin having some ideas in this area.
> 
> 
> There is always a $(SOLUTION + 1) to any problem.  I don't particularly
> see that as being a good reason to not do something useful to solve this
> problem in the meantime, especially if the mentioned $(SOLUTION + 1) is
> vaporware :)

Well, it depends on what you need. If you need a daemon to have
access to the devices, groups are perfectly fine. If you want
to dynamically add and remove users, groups are *bad*, as
Alan mentioned.

Bill




More information about the fedora-devel-list mailing list