From mboxrd@z Thu Jan 1 00:00:00 1970 From: Frederic Crozat Date: Wed, 07 Oct 2009 17:40:25 +0000 Subject: Re: Patch: add ACL for parallel printer and scanner Message-Id: <1254937225.16942.23.camel@trinidad.mandrakesoft.com> List-Id: References: <1254904702.16942.11.camel@trinidad.mandrakesoft.com> In-Reply-To: <1254904702.16942.11.camel@trinidad.mandrakesoft.com> MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable To: linux-hotplug@vger.kernel.org Le mercredi 07 octobre 2009 =E0 18:59 +0200, Martin Pitt a =E9crit : > Frederic Crozat [2009-10-07 18:31 +0200]: > > > This grants access to any device connected, to the parallel port, and > > > is not limited to printers or scanners, right? > > > KERNEL=3D"parport[0-9]*", ENV{ACL_MANAGE}=3D"1" > >=20 > > Yes, since there is no possible autodetection on it. >=20 > Parallel printers also use those devices, though (even though cups > usually talks through the lp module to them, through /dev/lpN). So far > we didn't give users access to printer devices, mostly because > cups should be the only thing which talks to them, to (1) avoid access > conflicts, and (2) avoid tampering printers and other users' print > jobs. >=20 > > Well, we need to set ACL on parallel port for scanners (not sure it is > > really needed for printers). >=20 > I'd really like to avoid it for printers, see above. As far as I know, there is no way to detect the device plugged on a parallel port, so I don't see how we could allow only access for scanner and not for printer (unless we move the ACL to sane package but it isn't a real protection). --=20 Frederic Crozat Mandriva