Sound daemons such as esd and artsd are used to allow users to play
sounds without chowning the /dev entries 

consolehelper is actually just a pretty wrapper for 'su'. It's used
mainly so that users can use the XFree86-based configuration utilities
in Red Hat without having to log out of an X session and log back in as
root or having to mess with the console. 

-Tim 


On Fri, 2002-10-04 at 00:13, -ray wrote: 
> 
> Yes it does create a small security hole.... when someone gets into your 
> machine they can play their own mp3's, hahaha.  I wouldn't worry about it 
> too much.  Typically you only use one user anyway, so you could just chown 
> it to that user.
> 
> Redhat (maybe mandrake?) at one time had an app call consolehelper.  It 
> would automatically set permissions when a user logged into the console.  
> It would set perms of /dev files (sound, floppy, cdrom, etc) so the 
> current user had access, and revoke the perms when they logout.  That is 
> how it should work....haven't looked into it in a long time so i don't 
> know how it should work now. 
> 
> -Ray
> -- 
> =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
> Ray DeJean                                     http://www.r-a-y.org
> Systems Engineer                    Southeastern Louisiana University
> IBM Certified Specialist            AIX Administration, AIX Support
> =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
> 
> 
> 
> On 3 Oct 2002, Alvaro Zuniga wrote:
> 
> > I was thinking about what I did with the sound devices. That would be a
> > security hole would it not? The devices are owned by root and the group
> > is sys and I am giving read and write privileges to the world. How
> > should those devices be modified?
> > 
> > Is it possible to have the /dev/mixer and /dev/dsp as the user and it's
> > group? That would mean that they would be created on demand. How?
> > 
> > Thanks,
> > 
> > Alvaro
> 
> 
> _______________________________________________
> General mailing list
> [email protected]
> http://host19.nocdirect.com/mailman/listinfo/general_brlug.net


Reply via email to