Hi,

> I think it can be a good idea to tighten the permissions in
> the udev rules a bit. In Fedora we use rtlsdr group
> for users authorized to access the HW, i.e. the following:
>
> sed -i 's/MODE:="0666"/GROUP:="rtlsdr", MODE:="0660"/' ../rtl-sdr.rules
>
> Maybe a bit annoying on single user desktop, but definitely
> a good security practice for fine grained access to resources
> especially on servers

I think it's good practice, but I also think that's the package
maintainer's job for each distro.

There is no real way to know how groups are managed and which exist
etc ... since it's pretty much distro specific. (for eg under gentoo I
don't even use that udev rules because I'm in a group allowing USB
peripheral access ...)

So having a wide and optional rule in the raw source package and let
the packager make it fit to their model seems like a good way to do it
for me.


Cheers,

   Sylain

Reply via email to