Patrick Shanahan wrote: > * joe <[EMAIL PROTECTED]> [10-22-07 23:01]: >> I'm guessing your desktop session gave you the right to access the >> cdrom but that doesn't apply to the hardware on the system in general, >> and it wouldn't apply if you had logged in via ssh, or if there were >> more than one desktop session running on your system. > > No, file permissions give you rights, not desktop sessions. I can > certainly ssh in and perform the same action.
As a normal user, you don't have sufficient rights to read everything on the system - many things are not world readable. However, when you start a desktop session, the session management scheme grants you access to certain desktop related devices, for instance The local display, sound devices, CD, DVD, pluggable devices etc. If you ssh in as you mentioned, while you're already logged into a desktop session then naturally you've already been granted rights to those devices. Log out of your desktop session, let somebody else start a local X session, then you ssh in and try to access those devices that you thought were world readable - you'll be denied. Joe -- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
