2010/9/5 Peter Stuge <pe...@stuge.se>:
> Martin Paljak wrote:
>> addgroup --system pcscd
>> adduser --system --ingroup pcscd --home /var/run/pcscd
>> --no-create-home --disallowed-login --disallowed-password pcscd
>
> ..ok, but instead of:
>
>> chown pcscd /usr/sbin/pcscd
>> chmod +s /usr/sbin/pcscd
>
> maybe:
>
> chown pcscd:smartcard /usr/sbin/pcscd
> chmod 4750 /usr/sbin/pcscd  # rwsr-x---

You should argument/document the change.

With your change only users in group smartcard will be able to run
pcscd. I guess that is the intention but you should write it.

I will let such a change to the administrator. It is a
regression/improvement compared to pcsc-lite as it is now and should
be decided by the local administrator.

Bye

-- 
 Dr. Ludovic Rousseau
_______________________________________________
opensc-devel mailing list
opensc-devel@lists.opensc-project.org
http://www.opensc-project.org/mailman/listinfo/opensc-devel

Reply via email to