Re: [OT] Problem restricting user privileges in ubuntu 7.10

["Damon L. Chesser" <damon@damtek.com>]

Ron Johnson wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> On 03/13/08 22:58, Damon L. Chesser wrote:
>   
> > Ron Johnson wrote:
> >     
> [snip]
>   
> > This "root@haggis:/etc# rgrep floppy *" led me to
> > /etc/udev/permissions.rules which has these 2 lines in them:
> > # all block devices on these buses are "removable"
> > SUBSYSTEM=="block", SUBSYSTEMS=="usb|ieee1394|mmc|pcmcia", \
> >                                                  GROUP="floppy"
> >
> > So, I'd look to see what the Ubuntu version of that file says.
> >
> >     
> > >       
>
>   
> > on a Ubuntu system (Gutsy)
> >     
>
>   
> > /etc/udev/permissions.rules does not exist, but
> > /etc/udev/rules.d/40-permissions.rules does
> >     
>
>   
> > there is a README in /etc/udev/rules.d you might want to read it.
> >     
>
>   
> > It says you can make a rule that overrides an earlier rule.  Rules start
> > at 00 and to up to 99, they are read in order.  50 series is for user
> > rules. 
> > beyond that, I can not help with out much googleing as I don't know the
> > syntax.  I have seen this come up on this very list from time to time,
> > but never paid it any heed.
> >     
>
> That's interesting.  I thought that udev stopped searching the rule
> set as soon as it found a matching rule.
>
> - --
> Ron Johnson, Jr.
> Jefferson LA  USA
>
> "Working with women is a pain in the a**."
> My wife
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.6 (GNU/Linux)
>
> iD8DBQFH2ftGS9HxQb37XmcRAhnrAKCcllLcJ0Kd4d9nZ4NG50RV7sIt9wCgw82O
> cd3WMR2XKOZ/BBqyw6/hlEI=
> =0Ihc
> -----END PGP SIGNATURE-----
>
>
>   
Quoting the Ubuntu README, since if you are running Debian, you will not 
have it:

--------------------------

The files in this directory are read by udev(7) and used when events
are performed by the kernel.  The udev daemon watches this directory
with inotify so that changes to these files are automatically picked
up, for this reason they must be files and not symlinks to another
location as in the case in Debian.

Files should be named xx-descriptive-name.rules, the xx should be
chosen first according to the following sequence points:

 00   rules that it is critical to be run first, usually
      only WAIT_FOR_SYSFS

 20   rules that change the name from the device from the default
      (cannot be overriden)

 40   rules that set the permissions of device nodes
      (can be overriden by later rules)

 60   rules that add symlinks to device nodes
      (adds to those set in earlier rules)

 80   rules that run programs (but do not load modules)

 90   rules that load modules

 99   rules that it is critical to be run last


This scheme has been chosen so that user-supplied rules are normally
named 50-*.rules for the right thing to happen.

Packages should chose the approriate sequence point and add 5 to it
(e.g. 25-iftab.rules, 45-libsane.rules, etc.) unless there is a need
for a particular order.
----------------------------------

see the note under "40".

And that is as much as I know about this.

--
Damon L. Chesser
damon@damtek.com