On Wed, Dec 29, 2021 at 12:51 AM Larry Finger <Larry.Finger@lwfinger.net> wrote:
On 12/28/21 11:38, Andrei Borzenkov wrote:
Virtualbox guest tools set /dev/vboxuser to 0660 root:users. New users no more belong to the users group and do not have access to this device.
Maybe guest tools should enable access for logged in user (TAG+="uaccess") instead.
My first inclination is to create /dev/vboxuser as 0660 root:vboxusers the save as /dev/vboxsf. If that does not work, I will check your suggested method.
This means every user in a guest system has to belong to the vboxsf group which is certainly not default and defeats the idea of having normal installation under VB. Besides having this device accessible to multiple users has potential security implications allowing other users to snoop shared clipboard content. /dev/vboxuser is used by VBoxClient which is started as part of (currently, only X11) user sessions. So it is just natural to automatically provide access to the currently logged in user and *only* to this user.