From mboxrd@z Thu Jan 1 00:00:00 1970 From: Kurt Konolige Date: Sun, 27 Nov 2005 05:45:28 +0000 Subject: Re: Hotplug, 1394, and security Message-Id: <438947F8.3030204@ai.sri.com> List-Id: References: <20051125213209.GZ20781@conscoop.ottawa.on.ca> In-Reply-To: <20051125213209.GZ20781@conscoop.ottawa.on.ca> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit To: linux-hotplug@vger.kernel.org The 1394 Trade Association puts out something called the "IIDC 1394-based Camera Specification", which most folks just call the DCAM spec. You control the camera by reading and writing into its 1394 address space, which is structured according to this spec. I think IEC 61883 defines a wrapper structure of iso packets that hold video; devices with uncompressed video typically don't use it. At any rate, user space control over the camera hinges on writing to /dev/raw1394, to set camera parameters. I frequently have to change the default /dev/raw1394 access controls on new Linux systems, to enable DCAM controls. It would be a pain if this were restricted to root access. Cheers --Kurt Jody McIntyre wrote: > On Sat, Nov 26, 2005 at 08:07:58AM +0100, Stefan Richter wrote: > >>Kurt Konolige wrote: >> >>>Will libraw1394 access be >>>restricted to root, as a default policy? There are user programs that >>>need access to libraw read/write, at least for DCAM-compliant devices. >> >>In my opinion, the kernel should not enforce one or the other policy. As >>long as a policy (e.g. security policy) can be controlled in userspace, >>control it in userspace. > > > I agree. It's really up to your udev configuration. You could even > continue to give your video users full /dev/raw1394 access (but you > wouldn't have to.) > > What do you mean by "DCAM-compliant"? IEC 61883? > > Cheers, > Jody > > >>-- >>Stefan Richter >>-===-=-=-= =-= =-=- >>http://arcgraph.de/sr/ > > ------------------------------------------------------- This SF.net email is sponsored by: Splunk Inc. Do you grep through log files for problems? Stop! Download the new AJAX search engine that makes searching your log files as easy as surfing the web. DOWNLOAD SPLUNK! http://ads.osdn.com/?ad_idv37&alloc_id865&op=click _______________________________________________ Linux-hotplug-devel mailing list http://linux-hotplug.sourceforge.net Linux-hotplug-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/linux-hotplug-devel