On 1/16/07, Ludovic Rousseau <[EMAIL PROTECTED]> wrote:
pcscd need to be run as root because:
- it creates files in /var/run but you can change that using --enable-ipcdir=DIR

So create /var/run/pcscd with ownership of the user..

- USB readers devices in /proc/bus/usb/... are only writable by root,
but that can be changed using a udev rule for example

You can configure your system to run pcscd as a normal user. It is
just a bit more work.

True, it can be the default now... Since you provide udev integration.

Running pcscd as root may be a problem if you do not trust code
executed as root by pcscd, like a proprietary driver. Do you have
other concerns?

Yes.
No daemon should run under root unless it has a good reason.
People only lately realise that...
I would also like the option to chroot after pcscd is up... :)

So:
1. Exists: --enable-ipcdir=/var/run/pcscd
2. Exists: --enable-runpid=/var/run/pcscd/pcscd.pid
3. Add: --enable-userid= option to generate currect udev rule.
4. Add: --chroot option to pcscd to allow chroot.
5. Run pcscd with --chroot /var/run/pcscd

What do you think?

Best Regards,
Alon Bar-Lev.
_______________________________________________
Muscle mailing list
[email protected]
http://lists.drizzle.com/mailman/listinfo/muscle

Reply via email to