Bug 18599 – the default console.perms has some inconsistancies

• Product: Gentoo Linux
• Status: RESOLVED DUPLICATE

[Description Max Kalika (RETIRED) 2003-04-01 13:47:52 UTC]

The default /etc/security/console.perms file that comes with the latest pam has 
some inconsistancies: 
 
1) the <v4l> class is incomplete (doesn't have the /dev/v4l directory) 
2) the reset perms for the <v4l> class set the group to sys (should be video?) 
3) there is no cdwriter group in baselayout so it complains on the <burner> class 
 
I am going to attach a patch for the first two issues.  The third one needs some 
consderation (I don't know whether the fix should be in pam or baselayout). 

Reproducible: Always
Steps to Reproduce:

[Comment 1 Max Kalika (RETIRED) 2003-04-01 13:48:43 UTC]

Created attachment 10093 [details, diff]
the patch described in the ebuild

[Comment 2 Martin Schlemmer (RETIRED) 2003-04-06 05:23:49 UTC]

We have a cdrw group ...

[Comment 3 Max Kalika (RETIRED) 2003-04-06 11:25:37 UTC]

Completely blanked on that.  I'll draw up another patch that takes that into
account.  Thank you!

[Comment 4 Martin Schlemmer (RETIRED) 2003-04-27 17:24:28 UTC]

*** Bug 19584 has been marked as a duplicate of this bug. ***

[Comment 5 Arthur Britto 2003-06-19 16:18:41 UTC]

Shouldn't this:
+<console>  0600 <v4l>        0600 root.video
Be this:
+<console>  0660 <v4l>        0660 root.video

This way members of the group video always have access to the devices.

[Comment 6 kavol 2004-04-21 11:16:44 UTC]

as for the cdrw group - burner class ... who the hell thinks that EACH SCSI device has to be cdrw??? I have a SCSI film scanner and I am really not able to stick a CD into it ...

p.s. sorry for not being polite enough for a bugreport, but I was not aware of the existence of this file before and I spent quite a time by examining why the scanning software does not work when it always worked before, so I am quite angry ... :-(

[Comment 7 Robert Schuster 2004-09-08 13:57:17 UTC]

In order to access my usb scanner in sane as a user I followed the instruction of this document: http://www.gentoo.de/doc/de/devfs-guide.xml and found out that this line:

<usb>=/dev/usb/dabusb* /dev/usb/mdc800* /dev/usb/rio500 /dev/ttyUSB* \
      /proc/usb/[0-9][0-9][0-9]/[0-9][0-9][0-9]

is not appropiate. The second line should be 

      /proc/bus/usb/[0-9][0-9][0-9]/[0-9][0-9][0-9]

since there is no /proc/usb directory. After this small edit permissions are changed successfully to the 'scanner' group after login.

[Comment 8 Diego Elio Pettenò (RETIRED) 2005-09-02 16:52:09 UTC]

pam_console is going away  

*** This bug has been marked as a duplicate of 31877 ***