Re: sys-apps/pcsc-lite needs to access /sys
Sven Vermeulen <[email protected]>
| Newsgroups | gmane.linux.gentoo.hardened |
|---|---|
| Message-ID | <[email protected]> |
On Sat, Feb 15, 2014 at 06:03:28PM +0100, Luis Ressel wrote: > I've had a first look at this. Sadly, there's no gid mount option for > sysfs. Another complication is that the group isn't granted any rights > anyway. > > I'll examine what changes to the kernel would be neccessary. (For sure, > one could also create an init script with chown/chmod, but that seems a > bit messy.) The init script approach is what most distributions are doing. We also relabel cpu/online in the selinux_gentoo init script. But the approach you mentioned on the other mailinglist (regarding reusing the statement already in use for /proc stuff) seems like a valid case - interesting to see what's going to happen ;) Wkr, Sven Vermeulen