Re: Hotplug, 1394, and security

[Kurt Konolige <konolige@AI.SRI.COM>]

The 1394 Trade Association puts out something called the "IIDC 
1394-based Camera Specification", which most folks just call the DCAM 
spec.  You control the camera by reading and writing into its 1394 
address space, which is structured according to this spec.  I think IEC 
61883 defines a wrapper structure of iso packets that hold video; 
devices with uncompressed video typically don't use it.

At any rate, user space control over the camera hinges on writing to 
/dev/raw1394, to set camera parameters.  I frequently have to change the 
  default /dev/raw1394 access controls on new Linux systems, to enable 
DCAM controls.  It would be a pain if this were restricted to root access.

Cheers --Kurt

Jody McIntyre wrote:
> On Sat, Nov 26, 2005 at 08:07:58AM +0100, Stefan Richter wrote:
> 
>>Kurt Konolige wrote:
>>
>>>Will libraw1394 access be 
>>>restricted to root, as a default policy?  There are user programs that 
>>>need access to libraw read/write, at least for DCAM-compliant devices.
>>
>>In my opinion, the kernel should not enforce one or the other policy. As 
>>long as a policy (e.g. security policy) can be controlled in userspace, 
>>control it in userspace.
> 
> 
> I agree.  It's really up to your udev configuration.  You could even
> continue to give your video users full /dev/raw1394 access (but you
> wouldn't have to.)
> 
> What do you mean by "DCAM-compliant"?  IEC 61883?
> 
> Cheers,
> Jody
> 
> 
>>-- 
>>Stefan Richter
>>-===-=-=-= =-= =-=-
>>http://arcgraph.de/sr/
> 
> 


-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems?  Stop!  Download the new AJAX search engine that makes
searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
http://ads.osdn.com/?ad_idv37&alloc_id\x16865&op=click
_______________________________________________
Linux-hotplug-devel mailing list  http://linux-hotplug.sourceforge.net
Linux-hotplug-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/linux-hotplug-devel