sys-apps/pcsc-lite needs to access /sys
Luis Ressel <[email protected]>
| Newsgroups | gmane.linux.gentoo.hardened |
|---|---|
| Message-ID | <[email protected]> |
Hello, I'm currently experimenting with OpenPGP smartcards. For those, I need sys-apps/pcsc-lite, which features a daemon (pcscd). This daemon has its own user and doesn't run with root permissions. However, it needs to access some files in /sys which are only accessible by root due to GRKERNSEC_SYSFS_RESTRICT. I went with the following solution: chown root:pcscd /usr/sbin/pcscd chmod 0710 /usr/sbin/pcscd filecap /usr/sbin/pcscd dac_read_search Should I just propose the maintainer to add this to the ebuild (conditional on a "hardened" USE flag), or would another course of action be preferred? Regards, Luis Ressel -- Luis Ressel <[email protected]> GPG fpr: F08D 2AF6 655E 25DE 52BC E53D 08F5 7F90 3029 B5BD
signature.asc
(application/pgp-signature, 966 B)
-----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (GNU/Linux) iQJ8BAEBCgBmBQJS93YoXxSAAAAAAC4AKGlzc3Vlci1mcHJAbm90YXRpb25zLm9w ZW5wZ3AuZmlmdGhob3JzZW1hbi5uZXRBMjU3MDBFQTc5QkYzMkY4NEQzMTFGNDlD NzE4OTFBNkEwRUZCN0U5AAoJEMcYkaag77fpDXYQAMq0ZBXCtAgK1SQ3Hz8lK4mx 3rHiHJDOz7HwqRBn3ovfVX98wjm0IDcQ7fbVSgph40sujhepw84C7pMUVwDH3qos VCrBQMQgifkT4LaMTPCUjher+hWEoPbmlLREfZyym2RhbPUJ0i6LVUIq3Zg9X+Bg arwrS/CriSyPIgOyelkKBCLhJ6qMgT2jUWf6rP2M907MJOIvd9s7zYX2YBRqSXHK cNTlvZozyfk8q94+l2iRshxl4Xw+FW+9cKjRFWXYOT+lIZFCRtF0uQoCkPPcbz/F zv4eAwhxhOp5TX649uLwNAJSP/S7sy3uObbnx+M269+Rs4LZCQ3KzWNPf9PdRjIB OJbmF5u/1hEPgQaqQ2Ho1lBgob+TCRvNqBFjEqZE9X4jgbKfZIul/BTI8d3eWVAk XJkn4aStA+OHbOO4rgiMq5hCDe9wH8UEZTQWUxJaET5zX2pvmZgER+YdAU3JaUg6 O8UAGtiQqiQPUFHrjRcNiIYN3pbllkqDuTooS+M6eOkmTby3dg3SBgVZGj+vHAU2 kyPZRfple2dcwC57QWbfico5AH8YSPemlWUCFGkAhJ6+hujKmJOPB5o3VSOX2bUd y/nbeUfXP6OavOzRBjNuL7uwoCVGDEDtWjBn4YmirxFASlGaiUWV9gyd/L7rLSTY o0HsCoEVgijF0vf5U9Bx =UVAf -----END PGP SIGNATURE-----