Mailinglist Archive: opensuse-security (23 mails)

[Ludwig Nussel <ludwig.nussel@xxxxxxx>]

Günter Dannoritzer wrote:
> Ludwig Nussel wrote:
> > Up to 11.0 you can tell resmgr to grant certain users access to
> > specific devices instead, see
> > http://forgeftp.novell.com/resmgr/web/#id2830544
>
> Thanks for the information. I tried the example given under the above
> link, by adding:
>
>   allow modem user=linux
>
> to a new file under /etc/resmgr.conf.d
>
> Did a restart of the resourcemanager and also see that I am now member
> of the modem group.
>
>   >/sbin/resmgr classes
>   modem
>   ...

You also need to unplug the device and plug it in again to generate
an event that sets the ACL.
 
> Now that still does not allow me to access the /dev/ttyUSB0. I looked in
> the files under /etc/hal/fid/policy/ and found:
>
>       <!-- serial devices -->
>       <match key="info.category" string="serial">
>           <match key="serial.device" exists="true">
>               <merge key="resmgr.device" 
> type="copy_property">serial.device</merge>
>               <merge key="resmgr.class" type="string">modem</merge>
>           </match>
>       </match>
>
> How do I know what class my ttyUSB0 device runs under?

lshal

> It is a FTDI 245 USB chip that runs with the kernel module ftdi_sio, an
> usbserial driver.

You can also match for usb vendor/product id. See the same web page
a few paragraphs up.

> BTW, you said that up to 11.0 the resmgr is taking care of resources.
> What takes care of them with 11.1?

ConsoleKit/PolicyKit/hal

cu
Ludwig

-- 
 (o_   Ludwig Nussel
 //\   
 V_/_  http://www.suse.de/
SUSE LINUX Products GmbH, GF: Markus Rex, HRB 16746 (AG Nuernberg)



--
To unsubscribe, e-mail: opensuse-security+unsubscribe@xxxxxxxxxxxx
For additional commands, e-mail: opensuse-security+help@xxxxxxxxxxxx