Bug#610696: udev: Udev changes device file ACLs and depends on consolekit

2011-01-23 Thread Harald Braumann
reopen 610696 thanks I've had another look at the package and it seems, that udev doesn't really require consolekit. The only dependency to consolekit I could find is the usage of /var/run/ConsoleKit/database by udev-acl. And the rules file already checks the existence of this file, before

Bug#610696: udev: Udev changes device file ACLs and depends on consolekit

2011-01-21 Thread Harald Braumann
Package: udev Version: 164-3 Severity: normal Hi, udev contains support for consolekit. The rule file 70-acl.rules and /lib/udev/udev-acls change the ACLs of certain device files to give local users access. I consider this a serious security problem. I have a guest account to let others use