Martin Pool wrote:

> I think capabilities only apply to uid=0 processes so it's
> probably not that.

True, but CUPS runs as root. If can fork a process, use libcap
to drop priviledges, change to uid=lp, gid=lp and the dropped
priviledges should stay dropped. I once did something a bit
like this myself.

> It's quite possible for a process starting as root to be uid=lp gid=lp
> without joining lp's groups.  In fact this is the default behaviour
> unless it makes a special effort to join those groups using the
> information from getent.  You can probably see this by looking in
> /proc/$pid/status.

Good point. I'll check that out.

> If ttyS0 is in fact a printer rather than a modem why don't you change
> it to be group lp? ;-)

Thats a very valid point. I think I got into this debugging mess when
we moved from Dapper where is just worked to Hardy.

So, in Hardy, how do I change the default owner and group for /dev/ttyS0?

Erik
-- 
-----------------------------------------------------------------
Erik de Castro Lopo
-----------------------------------------------------------------
UNIX *is* user-friendly, just picky about who it
chooses for friends!
_______________________________________________
coders mailing list
coders@slug.org.au
http://lists.slug.org.au/listinfo/coders

Reply via email to