Hi Johannes, Johannes Meixner writes (among other things):
> On Oct 28 20:18 Olaf Meeuwissen wrote (excerpt): >> Johannes Meixner writes: > ... >>> RFC for an additional goal for sane-backends-1.0.26: >>> >>> - switch to group "lp" instead of "scanner" > ... >> I think it best to leave this to the individual distributions to decide. > > My hope is that the individual distributions might even be able > to agree on a common default so that all Linux users could have > the same default base of operations. > >> What can be done fairly easily, however, is to make it easier for them >> to override/customize the DEVMODE, DEVOWNER and DEVGROUP values in >> tools/sane-desc.c. > > Perhaps a configure option to specify that would be nice? And/or command-line options that can be used to specify them (with build-time defaults provided via configure options). That way you can change your mind after configuring without having to reconfigure. You simply rerun the tool. >> FYI, Debian has >> >> ENV{libsane_matched}=="yes", RUN+="/bin/setfacl -m g:scanner:rw >> $env{DEVNAME}" > > I like to understand the reson behind why Debian uses > the "scanner" group. No clue. You'll have to ask the Debian maintainer. > Is it that for Debian use of consumables (paper and ink/toner) > in a printer is more strictly controlled than scanners? I just mentioned that as an example use case that I could think of. Not because Debian actually tries to do something like that. It would local policy (company/institute, department, etc.) stuff at best. > Regardless what the reason is, I also like to understand how > Debian deals with multifunction devices because - as far as > I understand it - there is the conflict that multifunction devices > would have to belong both to the "lp" and the "scanner" group. It's been a while and my memory is not quite up to snuff but from what I understand the setfacl invocation *adds* a scanner group with read/write permissions to the device access control list (if there wasn't one). If there is one already, only the groups permissions are set. Hope this helps, -- Olaf Meeuwissen, LPIC-2 FSF Associate Member since 2004-01-27 Support Free Software Support the Free Software Foundation https://my.fsf.org/donate https://my.fsf.org/join GnuPG key: F84A2DD9/B3C0 2F47 EA19 64F4 9F13 F43E B8A4 A88A F84A 2DD9 -- sane-devel mailing list: sane-devel@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/sane-devel Unsubscribe: Send mail with subject "unsubscribe your_password" to sane-devel-requ...@lists.alioth.debian.org