-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On 2010年07月22日 02:07, Julien BLACHE wrote:
> Olaf Meeuwissen <[email protected]> wrote:
>
> Hi,
>
>>> MFPs have always been an issue in that regard; only ACLs could fix this,
>>> unfortunately it's not natively supported by udev. Maybe I could change
>>> the libsane rules so they add the scanner group in the ACLs instead of
>>> using GROUP=?
>>>
>>> Would that be a viable solution?
>>
>> If that can be made to work in such a way that nothing changes from the
>> user point of view, then I'm all for it. I have no idea however how to
>> achieve that.
>
> I've just uploaded a new snapshot of SANE to experimental with udev
> rules modified to use ACLs for USB devices.
Cool!
> If you could try it out and report back, that'd be great. If all goes
> well in your tests, I'll commit that upstream and upload a new revision
> in unstable.
Seems to have fixed the problem.
$ groups
olaf dialout cdrom floppy audio video plugdev netdev scanner
$ getfacl -a /dev/bus/usb/002/006
getfacl: Removing leading '/' from absolute path names
# file: dev/bus/usb/002/006
# owner: root
# group: lp
user::rw-
group::rw-
group:scanner:rw-
mask::rw-
other::r--
and I can use the device just like before.
I have one concern though and that is the fact that setfacl lives below
/usr. Could that be a problem when you have /usr on a separate
partition and the device plugged in and powered on at boot time? None
of the rules files on my system currently tries to run anything below
/usr. Everything that gets RUN lives in /bin, /sbin, /lib/udev or in
/etc/init.d.
BTW, you also want to fix this in libsane-extras, I think.
- --
Olaf Meeuwissen, LPIC-2 FLOSS Engineer -- AVASYS CORPORATION
FSF Associate Member #1962 Help support software freedom
http://www.fsf.org/jf?referrer=1962
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
iEYEARECAAYFAkxHizwACgkQt5qrxaZLMnI20gCfbj/dW5QmMoIzCyvZsKX3BI7Q
1egAoJonPP7d7ayOTaw5o2c4TKkugBhN
=moPx
-----END PGP SIGNATURE-----
--
To UNSUBSCRIBE, email to [email protected]
with a subject of "unsubscribe". Trouble? Contact [email protected]
