Fedora 12 and unprivileged package installation [LWN.net]

Fedora 12 and unprivileged package installation

Posted Nov 21, 2009 12:38 UTC (Sat) by ballombe (subscriber, #9523)
In reply to: Fedora 12 and unprivileged package installation by drag
Parent article: Fedora 12 and unprivileged package installation

I like to note that selinux is sometimes configured to forbid users to install shared library in their home dir.

> brw-rw---- 1 root floppy 8, 16 Nov 20 17:49 /dev/sdb

It is an udev configuration problem: as configured it tries to guess what
the device is to add it to the relevant group and sometimes it makes wrong guess (e.g. a scanner was marked as a floppy).

> But after that any new user defaults to no group membership except their own, so it's not too bad. Just as long as I don't get UID 1000 on Debian then any removable media is safe from me. :)

It should be noted that the extra groups are only added to the user
created during the installation process. The assumption is whoever install the machine is the admin. Further more since you are also in plugdev, you can mount filesystems anyway.

(Log in to post comments)