Re: ITP or RFP pam-redhat or request to merge pam-redhat in pam
On Tue, Nov 05, 2002 at 03:54:00AM +0900, Fumitoshi UKAI wrote:
> w3m-img, there are two ways for now. One is setuid, and the other is
> change permission of /dev/fb0.
why not using /etc/security/group.conf instead?
with something like
*;tty*&!ttyp*;*;Al0000-2400;cdrom,video,audio,floppy,fb,...
enable module in pam.d/<whatever> and creating group fb for
framebuffer.
it adds current console user to groups listed above and
remote users (for example) won't be able to read /dev/fb*
IMHO it's a cleaner way to use devices with particular permission, and
might be applied by default in pam (I don't know if the syntax of
example is correct..., but in general it is feasible).
cosimo.
--
Cosimo Alfarano <alfarano at cs.unibo.it>
0DBD 8FCC 4F6B 8D41 8F43 63A1 E43B 153C CB46 7E27
buckle your seat bealt Dorothy... because Kansas... is going bye-bye
Reply to: