Re: sys-apps/pcsc-lite needs to access /sys

Sven Vermeulen <[email protected]>
Newsgroups gmane.linux.gentoo.hardened
Message-ID <[email protected]>
On Sat, Feb 15, 2014 at 06:03:28PM +0100, Luis Ressel wrote:
> I've had a first look at this. Sadly, there's no gid mount option for
> sysfs. Another complication is that the group isn't granted any rights
> anyway.
> 
> I'll examine what changes to the kernel would be neccessary. (For sure,
> one could also create an init script with chown/chmod, but that seems a
> bit messy.)

The init script approach is what most distributions are doing. We also
relabel cpu/online in the selinux_gentoo init script.

But the approach you mentioned on the other mailinglist (regarding reusing
the statement already in use for /proc stuff) seems like a valid case -
interesting to see what's going to happen ;)

Wkr,
	Sven Vermeulen
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.