❦  3 décembre 2014 16:47 GMT, Ivan Shmakov <i...@siamics.net> :

>  > The problem with those groups is that they are not fine grained
>  > enough.  For example, the video group gives access to the framebuffer
>  > device (the user can do a screenshot) or to a webcam (the user can
>  > spy another user).  By encouraging the use of those groups, we create
>  > big security hole.
>
>       Do these security considerations still apply to single-user,
>       single-seat systems?

Yes. We don't "chmod -R a+rwx /" for a good reason.
-- 
panic("esp_handle: current_SC == penguin within interrupt!");
        2.2.16 /usr/src/linux/drivers/scsi/esp.c

Attachment: signature.asc
Description: PGP signature

Reply via email to