On Tue, Dec 14, 2004 at 08:49:58PM +0000, Robert McQueen wrote: > Such a system with hundreds of users could either be a server, in which > case the users are unlikely to be plugging in arbitrary devices, and you > probably won't be running udev, hal, gvm, pmount & friends on it. Or it > could be a workstation, in which case you only want the user who is > sitting at it and logged in to be able to mount the devices or removable > media which are presumably theirs, so a pam module to add them to the > group at login, and remove them from it at log out, seems reasonable. > Access to the sound and video hardware (for DRI) could usefully be > controlled in a similar way.
We manage sound and video devices on our workstations with libpam-devperm, however, the sound and video devices do not change, whereas the devices for pluggable USB drives do. (so we'd have to use your group management trick) Is there a PAM module you have in mind which could perform such a trick? Ryan
