Ludovic Rousseau wrote:
> > maybe:
> >
> > chown pcscd:smartcard /usr/sbin/pcscd
> > chmod 4750 /usr/sbin/pcscd  # rwsr-x---
> 
> You should argument/document the change.

Really? Even in this forum?


> With your change only users in group smartcard will be able to run
> pcscd. I guess that is the intention but you should write it.

I expected everyone to understand since I believe everyone following
this is very smart, and the intent of a group smartcard was already
discussed earlier to be a means of controlling who can use pcscd.


> I will let such a change to the administrator. It is a
> regression/improvement compared to pcsc-lite as it is now and
> should be decided by the local administrator.

It can definately be a system policy thing. But I believe such policy
is often inspired by upstream, so had you endorsed the idea then it
might become more widespread. It's not a big deal to me though, and
especially since it is a change from what pcsc-lite does already I
understand if you prefer not to do it. The whole thing is also
distribution specific, some distros which focus on policy stuff might
already be doing what I suggested..


//Peter
_______________________________________________
opensc-devel mailing list
opensc-devel@lists.opensc-project.org
http://www.opensc-project.org/mailman/listinfo/opensc-devel

Reply via email to