Alan Cox wrote:
> 
> > >   usb/dc2xx#    char  180:80-87         root:video?     0660
> >
> > I'd not use the "video" group, it's not a video device.
> >
> > The permission should be 0666, so any user can get (exclusive)
> > access to a given device without needing root privileges.
> 
> It should be 0600. It is up to the console login modules to assign it a
> non root owner

Depends on the overall system security policy.  If it really is
a single user desktop (no rlogins, one console, and otherwise
set up as "safe" as possible) there's no threat.  I consider
anything else as likely insecure already ... though I agree that
a machine set up with a bunch of dedicated webcams will want to
have those webcams owned by their application, not any user.


Is there someplace with a writeup of the flexibility available
with all of the currently-stable devfs-ish tools?  With all the
happenings with devfs and usbdevfs (etc) I've yet to see even a
forwarded email.

For example, I didn't know that there was support in "the console
login modules" for that sort of mechanism.  The last time that I
looked at it, it only know about the particular /dev/tty the login
was being performed on.

- Dave

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to