[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: static user needed; rest done in base-config



Le samedi 04 décembre 2004 à 10:25 +0000, Colin Watson a écrit :
> On Fri, Dec 03, 2004 at 05:27:35PM -0500, Joey Hess wrote:
> > I have made base-config add the first user to plugdev, if that group
> > exists. So we only need a static plugdev group to be added in
> > base-passwd and this will be fixed. See
> > http://oskuro.net/blog/freesoftware/gnome-2.8-sarge-2004-12-03-18-19 for
> > some good reasoning about why this will become a FAQ if it's not fixed.
> 
> Done, with gid 46. I've added documentation of the group as follows:

You rock, both of you.

>       <varlistentry>
>         <term>plugdev</term>
>         <listitem>
>           <para>
>             Members of this group can mount removable devices in limited
>             ways via <command>pmount</command> without a matching entry in
>             <filename>/etc/fstab</filename>. This is useful for local users
>             who expect to be able to insert and use CDs, USB drives, and so
>             on.
>           </para>
>           <para>
>             Since <command>pmount</command> always mounts with the nodev and
>             nosuid options and applies other checks, this group is not
>             intended to be root-equivalent in the ways that the ability to
>             mount filesystems might ordinarily allow. Implementors of
>             semantics involving this group should be careful not to allow
>             root-equivalence.
>           </para>
>         </listitem>
>       </varlistentry>
> 
> If there are any inaccuracies here, let me know.

I'm not exactly sure about CDs. It seems that pmount can mount CDs, but
it is not really meant to, and on a standard setup it won't, because
they are already in the fstab.
-- 
 .''`.           Josselin Mouette        /\./\
: :' :           josselin.mouette@ens-lyon.org
`. `'                        joss@debian.org
  `-  Debian GNU/Linux -- The power of freedom

Attachment: signature.asc
Description: Ceci est une partie de message =?ISO-8859-1?Q?num=E9riquement?= =?ISO-8859-1?Q?_sign=E9e?=


Reply to: