Re: [opensc-devel] [Muscle] Re: pcscd access rights limitation and scard group

2010-09-04 Thread Ludovic Rousseau
2010/9/4 Michael StJohns : > Hi - Hello, > It wasn't clear from your emails earlier, but are you also building in the > appropriate SELinux contexts and permissions?  On Fedora 13, I've run into > some SE error messages related to the packaged PCSCd. I have never played with SELinux. I will tr

Re: [opensc-devel] pcscd access rights limitation and scard group

2010-09-04 Thread Ludovic Rousseau
2010/9/4 Peter Stuge : > Martin Paljak wrote: >> Nothing bad will happen if pcscd is not gracefully shut down when >> the computer is rebooting, > > Not the problem. But if pcscd crashes it should be restarted, as long > as the card is still inserted. So pcscd needs to be supervised. Many > distrib

Re: [opensc-devel] pcscd access rights limitation and scard group

2010-09-04 Thread Ludovic Rousseau
2010/9/4 Martin Paljak : > Hello, > > >> I decided to use a new group called "pcscd". >> I wrote an blog article [3] about this feature. >> >> pcsc-lite 1.6.5 is not yet released to allow anybody to comment on the >> idea and provide feedback before the release. >> You can get a snapshot of pcsc-li

Re: [opensc-devel] pcscd access rights limitation and scard group

2010-09-04 Thread Peter Stuge
Martin Paljak wrote: > >> >> Why not make the udev rule start pcscd, .. > The same way patching the udev file is done by the package > (creator), as needed. Mh, maybe. But I don't think this is something packagers are really used to being a task for them.. Or maybe I'm wrong? > > System pcscd wo

Re: [opensc-devel] pcscd access rights limitation and scard group

2010-09-04 Thread Martin Paljak
Hello, On Sat, Sep 4, 2010 at 21:29, Peter Stuge wrote: > Martin Paljak wrote: >> >> Why not make the udev rule start pcscd, >> > >> > One reason is that it needs highly distribution dependent udev rules, >> >> Existence of pcscd group is also distribution dependent, to some >> extent (meaning, i

Re: [opensc-devel] pcscd access rights limitation and scard group

2010-09-04 Thread Peter Stuge
Martin Paljak wrote: > >> Why not make the udev rule start pcscd, > > > > One reason is that it needs highly distribution dependent udev rules, > > Existence of pcscd group is also distribution dependent, to some > extent (meaning, it has to exist and maybe needs to be created) True. This is typ

Re: [opensc-devel] pcscd access rights limitation and scard group

2010-09-04 Thread Martin Paljak
On Sep 4, 2010, at 8:33 PM, Peter Stuge wrote: > Martin Paljak wrote: >> Why not make the udev rule start pcscd, running as a system user >> (nobody?), when a reader is connected? > > One reason is that it needs highly distribution dependent udev rules, > while setting owner/permissions on a dev

Re: [opensc-devel] pcscd access rights limitation and scard group

2010-09-04 Thread Peter Stuge
Martin Paljak wrote: > Why not make the udev rule start pcscd, running as a system user > (nobody?), when a reader is connected? One reason is that it needs highly distribution dependent udev rules, while setting owner/permissions on a device is distribution agnostic. //Peter ___

Re: [opensc-devel] pcscd access rights limitation and scard group

2010-09-04 Thread Martin Paljak
Hello, > I decided to use a new group called "pcscd". > I wrote an blog article [3] about this feature. > > pcsc-lite 1.6.5 is not yet released to allow anybody to comment on the > idea and provide feedback before the release. > You can get a snapshot of pcsc-lite and libccid from [4]. You have t

Re: [opensc-devel] pcscd access rights limitation and scard group

2010-09-04 Thread Ludovic Rousseau
2010/8/30 Ludovic Rousseau : > Hello, > > As listed on the pcsc-lite TODO file [1] I would like to run pcscd as > a normal user instead of root. To do this I need to: > 1. select a normal user id or group id to use > 2. write a udev (or whatever hotplug mechanism is used) file to set > the access r