Yes it does create a small security hole.... when someone gets into your 
machine they can play their own mp3's, hahaha.  I wouldn't worry about it 
too much.  Typically you only use one user anyway, so you could just chown 
it to that user.

Redhat (maybe mandrake?) at one time had an app call consolehelper.  It 
would automatically set permissions when a user logged into the console.  
It would set perms of /dev files (sound, floppy, cdrom, etc) so the 
current user had access, and revoke the perms when they logout.  That is 
how it should work....haven't looked into it in a long time so i don't 
know how it should work now. 

-Ray
-- 
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
Ray DeJean                                       http://www.r-a-y.org
Systems Engineer                    Southeastern Louisiana University
IBM Certified Specialist              AIX Administration, AIX Support
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=



On 3 Oct 2002, Alvaro Zuniga wrote:

> I was thinking about what I did with the sound devices. That would be a
> security hole would it not? The devices are owned by root and the group
> is sys and I am giving read and write privileges to the world. How
> should those devices be modified?
> 
> Is it possible to have the /dev/mixer and /dev/dsp as the user and it's
> group? That would mean that they would be created on demand. How?
> 
> Thanks,
> 
> Alvaro


Reply via email to