[Slackbuilds-users] HAL 'plugdev' system-group (ivman/pmount)
Patrick J. Volkerding
volkerdi at slackware.com
Wed May 16 17:32:19 UTC 2007
Robby Workman wrote:
> Menno Duursma wrote:
>> Hello ya'll,
>> The configfile for HAL included in the buildscript sets the 'users' group
>> as the one allowed to mount volumes. However the default used in other
>> distros (or atleast Debian) Bis 'plugdev' which might improve security.
> Hmmm... I like that idea, and assuming that it's fairly standard, I
> would definitely be willing to change the way we do it. In fact, I
> intended to do some more research into how other distros are handling
> it, but I wanted to get a working build out first and then handle the
> tweaks and such later - I've just not had time to follow up on it.
> If Debian uses 'plugdev' then that's certainly an option. If anyone
> uses some other distros and would like to chime in on this with
> respect to what $DISTRO uses for that group, feel free. :-)
Wouldn't it make more sense to just reuse the "cdrom" group for this?
IMHO, allowing a users to mount a pluggable device isn't much different
from allowing them to mount a CD/DVD.
More information about the Slackbuilds-users