OK, I had not thought of this cases.
You're right for la_danse_des_canards. It could be horrible...

But why is it so long to change these perms ?
How is managed the list of devices to change ?


Michael Scherer wrote:
But why is it necessary to change the perms of the devices ??
This should be only a matter of groups.

For example /dev/mixer should always belong to root:audio with perms
crw-rw----, and a user should be in the group audio.
So even ater login, the /dev entry has not been changed, but only the
users of the group audio could access /dev/mixer.
And when a user is created, it should automatically belong to a series
of standard groups like audio, etc.

If permissions are not changed, everybody able to log via ssh on my computer, and who belongs to audio, can launch

mpg123 la_danse_des_canards.mp3

of course, they can also launch aumix to make that everybody in the house will hear this wonderful song.....

i will not even talk about reading /dev/dsp with a microphone plugged in.

The problem is the same for all devices ( in fact, only sound, floppy, various terminal and cd permissions are changed ).

Once someone is logged and in a group ( or not in a group ) , you cannot change this.
You need to log out and log in for changes to make effect ( as far as I know, I maybe wrong )



Mick




Reply via email to