On 16/10/06, Iain MacDonnell <[EMAIL PROTECTED]> wrote:
This line in winscard_msg_srv.c is a bit weak :(

         SYS_Chmod(PCSCLITE_CSOCK_NAME, S_IRWXO | S_IRWXG | S_IRWXU);

What would you propose instead?

The PC/SC API is supposed to be available to any process. It should be
easy to restrict this access to users in a "pcsc" group. I can add a
"--group name" argument to pcscd to do that but I don't know it that
would be used by many administrators.

But that would not solve the problem to restrict access to PC/SC to
local users only.

Bye,

--
 Dr. Ludovic Rousseau
_______________________________________________
Muscle mailing list
Muscle@lists.musclecard.com
http://lists.drizzle.com/mailman/listinfo/muscle

Reply via email to