❦ 3 décembre 2014 15:46 +0100, Svante Signell <svante.signell@gmail.com> :
>> The problem with those groups is that they are not fine grained
>> enough. For example, the video group gives access to the framebuffer
>> device (the user can do a screenshot) or to a webcam (the user can spy
>> another user). By encouraging the use of those groups, we create big
>> security hole.
>
> If more granularity is needed, what's hindering introduction of even
> more groups: like an image group and splitting the fb0 to more devices?
> Or even subdirectories like /dev/snd/* for audio etc.
Sure. That is not the case actually. logind/udev are here today.
--
Don't patch bad code - rewrite it.
- The Elements of Programming Style (Kernighan & Plauger)
Attachment:
signature.asc
Description: PGP signature