You can write a small C program to essentially act as a wrapper to the
mknod(2) system call.  Then set this program to be setuid-root and have it
behave correctly as such..  Also this allows you to control exactly WHAT
devices a user can create.

The other alternative that was suggested was to just set the mknod binary
to be setuid root.  This can have security and safety ramifications, and
it may not even work at all (IIRC programs usually need to be
setuid-aware).  Can you imagine what would happen if a goofy developer who
mistyped a major number instead pointed a device node to something like
the ide driver rather than an RTF?  Then he tries to write to the fifo and
POOF, there goes your hard drive!  :)

-Calin



On Tue, 11 Dec 2001, Lilja, Michael wrote:

> Hi All,
>
> I have started using the RTlinux 3.1 package on Redhat 7.1 but have a
> problem when performing 'make devices'.
>
> It only works if I log in as root (which I can).
>
> I have several other developers who might need to perform the 'make
> devices' command also, and they do not have root privileges and will not
> gain root privileges, so how can I get the 'make devices' run.
> The problem is that non-root users cannot use the 'mknod' command.
>
> Hope someone has an answer (and I'm not interested in fakeroot)
> Michael Lilja
> -- [rtl] ---
> To unsubscribe:
> echo "unsubscribe rtl" | mail [EMAIL PROTECTED] OR
> echo "unsubscribe rtl <Your_email>" | mail [EMAIL PROTECTED]
> --
> For more information on Real-Time Linux see:
> http://www.rtlinux.org/
>

-- [rtl] ---
To unsubscribe:
echo "unsubscribe rtl" | mail [EMAIL PROTECTED] OR
echo "unsubscribe rtl <Your_email>" | mail [EMAIL PROTECTED]
--
For more information on Real-Time Linux see:
http://www.rtlinux.org/

Reply via email to