> proposal here is to just manage the permissions, via ACL's, on said > device files. And of course revoke() after having removed the ACL. ACL's suck though.... they make your system rather... slow often, and they have many other downsides. And they don't work on all filesystems either ;)