[Slackbuilds-users] HAL 'plugdev' system-group (ivman/pmount)

[Robby Workman]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Menno Duursma wrote:
> Hello ya'll,
> 
> The configfile for HAL included in the buildscript sets the 'users' group
> as the one allowed to mount volumes. However the default used in other
> distros (or atleast Debian) Bis 'plugdev' which might improve security.
> 
> 'ivman' normally runs a (and/or its own very) user, who is a member of the
> 'plugdev' group and 'pmount' is installed suid-root group executable only.
> 
> I recently submitted buildscripts for 'ivman' (which handles events, on
> laptops) and 'pmount' (which automates mounting of USB drives, even for
> like FVWM users) however the permissions therein are all wrong and the
> ivman one overwrites config-files :-(.
> 
> So i hope ya'll remove them from /pending I would like to resubmit them
> fixed/documented. TIA!


Okay, after reading through all of the threads on this and a bit of
research, as well as talking to others, I've decided to modify the SBo
script for HAL to use the plugdev group instead of users.  This won't
be happening soon, necessarily (but not a huge delay either), as I
want to explore the idea of using something besides wheel for the
PowerManagement stuff in hal.conf.  Anyway, give me some time to get
this worked out here, and then we'll go from there.

If you'd prefer, it might be best to resubmit ivman and pmount after
all that is done, but it's up to you.  If you want to go that route,
let me know and I'll remove them from /pending for the time being.

RW
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.4 (GNU/Linux)

iD8DBQFGTJatjQG6fL2aiA4RAkr0AJ9MvFSiOlp2m9Xmc/t7aVk4WFSp+ACcCd8K
LIUJ4KDX691SfUBBlhQhJz8=
=FBP5
-----END PGP SIGNATURE-----