[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#814313: group input is enough



> Ideally if root privs are to be dropped, logind is not available, and the
> input drivers will not have access to the input devices then the server
> could error out?  But I'm not sure if that's architecturally sane.  I
> guess the second best option would be, if logind is not present then the
> server perhaps should simply not drop root privs.

Alternatively it could setegid("input") when dropping root.  That's of
course worse than fine-grained access controls, but far better than
wholesale root privs.


Meow!
-- 
Autotools hint: to do a zx-spectrum build on a pdp11 host, type:
  ./configure --host=zx-spectrum --build=pdp11


Reply to: