https://bugzilla.novell.com/show_bug.cgi?id=465502 User aorlovskyy@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=465502#c1 Alexander Orlovskyy changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |ASSIGNED CC| |aorlovskyy@novell.com AssignedTo|bnc-team-screening@forge.pr |sndirsch@novell.com |ovo.novell.com | --- Comment #1 from Alexander Orlovskyy 2009-01-15 06:15:28 MST --- Stefan, can you comment on bug? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=465502 User lnussel@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=465502#c3 Ludwig Nussel changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |lnussel@novell.com AssignedTo|hmacht@novell.com |kasievers@novell.com --- Comment #3 from Ludwig Nussel 2009-01-15 06:45:19 MST --- In principle ConsoleKit can be abused for something like that. I'd write the script slightly different though. For multi session/multi user support one would also need some kind of reference counting and actually use ACLs. IMHO ConsoleKit isn't the correct place to put this script though, some other package has to put it in place (e.g hal or the drivers themselves). Reassigning to Kay who seems to work on finding a common solution to such problems. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=465502 User jimc@math.ucla.edu added comment https://bugzilla.novell.com/show_bug.cgi?id=465502#c5 --- Comment #5 from James Carter 2009-01-15 10:50:14 MST --- @sndirsch & @kasievers: For a machine with one user or maybe a family, groupwise permission management is fine. But we manage an instructional program with four computing labs and about 1000 students (different every 3 months); an enterprise deployment would have similar problems. Putting every student in group "video" would likely exceed a buffer limit -- better to make /dev/nvidia0 mode 666. But these are undergraduates with too much time on their hands; I'm sure you get my drift here. We really want the console user, specifically, to have access. Granting permission via an ACL would be nice, but I wanted to keep it simple, and in particular, if the machine crashed with the ACL row in place, it takes a little brainpower to get rid of it next time around, particularly if it's possible that unrelated ACL rows (like for a global notification daemon) might be configured. Hell will freeze over before the vendors make their drivers' licenses FOSS compliant. Maybe a compromise: they would register with sysfs only the most basic device characteristics, bypassing legally troublesome proprietary features. But to really solve the problem is kind of off topic for this thread and will take until OpenSuSE 12.3 at least. "You guys got me to pay for these fancy cards which work fine in Windows, and now you tell me Linux can't handle them? You're all fired! And take your Linux crap with you." Pointy-haired bosses do say things like that. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=465502 User jimc@math.ucla.edu added comment https://bugzilla.novell.com/show_bug.cgi?id=465502#c7 --- Comment #7 from James Carter 2009-01-15 12:26:45 MST --- We use NIS, and will soon migrate to NIS emulation in LDAP. They do not have proper relational database tables; both are actually emulations of the original UNIX files. In other words, you can do getgrnam or getgrgid, and the NIS server has a Berkeley DB table for those keys, but the values are entire rows from the master group file. Still too long. We need to do this right, i.e. do what you suggested with a script in /etc/ConsoleKit/run-session.d. And the distro is very correct in not setting mode 666: permission too broad on the graphics device (like putting all the students in group video) invites pranks and FERPA violations. You're right, /dev is volatile in a reboot. I was thinking from the previous millenium. No more foot-dragging about ACLs. It's been a while since I looked at this, but some of the wireless drivers look like they have a FOSSoid top layer which acts as middleware to a separate driver that has the ugly parts. But that doesn't solve any problems for this quarter's students. I'm trying to influence the distro managers to come up with a semi-sanitary solution for this fairly common range of devices, so Linux will work out of the box for more users. That's the way to spread the gospel. Pressure on the vendors to FOSS-ize drivers is fine, but telling my mother-in-law to boycott nVidia is going to lead to her boycotting Linux instead, and similarly for the all-important corporate CIO. And I'm sure it was not the most productive use of your time to answer my query on this topic on ConsoleKit-devel; at least it's now in the mailing list archives. Thank you for effective help there. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.