Re: [TCLUG:12802] Security on /dev

[Chris McKinley <lamfada@lugh.net>]

For mounting/umounting removable media, there is an option which goes in
/etc/fstab to allow users to mount/umount removable media.  The remainder
of device access can be controlled by using groups, setting permissions
and adding/removing users from the corresponding device group as
needed.  

-Chris 


On Mon, 24 Jan 2000, Smith Jeremy wrote:

> 
> Does anyone know of any kind of documentation on what permissions on Linux
> devices should be?
> 
> I find myself needing to enable write access to various system devices in
> order to allow users to use applications (for instance adding write access
> to /dev/mixer in order to change the volume, or read access to /dev/hdc in
> order to use a CDROM player) but I'm somewhat uncomfortable with doing so
> for security purposes.  I can imagine that exploits can exist which use
> improperly configured devices, but on the other hand I want people to have
> that X, sound, and the ability to mount and unmount removable media.
> 
> Jer
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: tclug-list-unsubscribe@mn-linux.org
> For additional commands, e-mail: tclug-list-help@mn-linux.org
> 
>