From mboxrd@z Thu Jan 1 00:00:00 1970 From: Marcel Holtmann Date: Fri, 07 Aug 2009 17:30:11 +0000 Subject: Re: Add user ACLs for /dev/rfkill Message-Id: <1249666211.30166.10.camel@localhost.localdomain> List-Id: References: <4A72CE4E.3030205@redhat.com> In-Reply-To: <4A72CE4E.3030205@redhat.com> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit To: linux-hotplug@vger.kernel.org Hi Bill, > > > Kay? > > > > What's the use case and unprivileged user will need this? It's more > > that NetworkManager and such will interact with that, right? > > The bluetooth radio itself is not necessarily a NM-managed object; it's > managed by gnome-bluetooth or similar stacks. the Bluetooth radio is not managed by gnome-bluetooth. It is managed by bluetoothd. The gnome-bluetooth is just UI code. I object against having UI code control RFKILL switches directly without proper policy and access management in between. > My concern about making it user accesible is it makes it harder for > an administrator to lock down the device if the user can then just > unlock it. But perhaps that's better done at the modprobe level > (not that that works sanely now.) Exactly. We can not just give a user control over all RFKILL switches. If you wanna do that in a generic way, you better have a D-Bus enabled RFKILL daemon that integrates with PolicyKit or use something like ConnMan which already does this. Regards Marcel