[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: DE features dependent on Systemd



 ❦  3 décembre 2014 16:47 GMT, Ivan Shmakov <ivan@siamics.net> :

>  > The problem with those groups is that they are not fine grained
>  > enough.  For example, the video group gives access to the framebuffer
>  > device (the user can do a screenshot) or to a webcam (the user can
>  > spy another user).  By encouraging the use of those groups, we create
>  > big security hole.
>
> 	Do these security considerations still apply to single-user,
> 	single-seat systems?

Yes. We don't "chmod -R a+rwx /" for a good reason.
-- 
panic("esp_handle: current_SC == penguin within interrupt!");
	2.2.16 /usr/src/linux/drivers/scsi/esp.c

Attachment: signature.asc
Description: PGP signature


Reply to: