[ConsoleKit] Permissions with consolekit and gdm
halfline at gmail.com
Fri Jul 2 18:09:07 PDT 2010
On Fri, Jul 2, 2010 at 2:45 AM, Christoph Pleger
<Christoph.Pleger at cs.tu-dortmund.de> wrote:
> I have been using pam_devperm.so for a long time. pam_devperm.so is a
> PAM module that, with my configuration, changes the ownerships and
> permissions of some device nodes in /dev when a user logs in on :0, so
> that the device nodes belong to that user and get permissions 600.
> Now I realized that if consolekit is installed and additionally gdm is
> used as display manager, the permissions of the device nodes are set to
> 600, but then they are reset to 660.
> What does consolekit do that causes the permissions to be changed if
> gdm is used as display manager?
ConsoleKit has a callouts mechanism that gets called when the user
changes VTs and for other reasons. See the directories:
udev installs a helper application in one of the directories to manage
device acls for the user on the currently active VT. If you're using
udev, then this is probably what you're seeing.
More information about the ConsoleKit