So the seat assignment works fine – gdm is added to the ACL. The problem is that the devnode is *world-readable*. -- Mantas Mikulėnas <<a href="mailto:grawity@gmail.com">grawity@gmail.com</a>> <div class="gmail_quote">On May 28, 2014 8:57 PM, "Floris" <<a href="mailto:jkfloris@dds.nl">jkfloris@dds.nl</a>> wrote: <blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"> Op Wed, 28 May 2014 19:06:22 +0200 schreef Zbigniew Jędrzejewski-Szmek <<a href="mailto:zbyszek@in.waw.pl" target="_blank">zbyszek@in.waw.pl</a>>: <blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"> On Wed, May 28, 2014 at 05:45:01PM +0200, Floris wrote: <blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"> >Are you logged in as the same user on both seats? > Nobody is logged in on seat1 >I think the difference is that with `jstest`, the device doesn't >interact with your seat, but *you* are interacting directly with its >device node, so the only thing that's checked is devnode >permissions... > When I start a game on seat0 I can use the joystick attached to seat1 </blockquote> What does 'getfacl /dev/input/js0' say? And 'loginctl seat-status seat1'? Zbyszek </blockquote> $ getfacl /dev/input/js0 getfacl: Removing leading '/' from absolute path names # file: dev/input/js0 # owner: root # group: root user::rw- user:Debian-gdm:rw- group::r-- mask::rw- other::r-- $ loginctl seat-status seat1 seat1 Sessions: *c1 Devices: ├─/sys/devices/pci0000:00/0000:00:05.0/0000:02:00.0 │ [MASTER] pci:0000:02:00.0 ├─/sys/devices/pci0000:00/0000:00:05.0/0000:02:00.1/sound/card1 │ sound:card1 "NVidia" │ ├─/sys/devices/pci0000:00/0000:00:05.0/0000:02:00.1/sound/card1/input14 │ │ input:input14 "HDA NVidia HDMI/DP,pcm=7" │ └─/sys/devices/pci0000:00/0000:00:05.0/0000:02:00.1/sound/card1/input5 │ input:input5 "HDA NVidia HDMI/DP,pcm=3" ├─/sys/devices/pci0000:00/0000:00:1a.0/usb1/1-1/1-1.4 │ usb:1-1.4 │ ├─/sys/devices/pci0000...000:00:1a.0/usb1/1-1/1-1.4/1-1.4.1/1-1.4.1:1.0/0003:05FE:0011.0005/input/input19 │ │ input:input19 "Cypress Sem PS2/USB Browser Combo Mouse" │ ├─/sys/devices/pci0000...000:00:1a.0/usb1/1-1/1-1.4/1-1.4.2/1-1.4.2:1.0/0003:046D:C312.0006/input/input20 │ │ input:input20 "BTC USB Multimedia Keyboard" │ ├─/sys/devices/pci0000...000:00:1a.0/usb1/1-1/1-1.4/1-1.4.2/1-1.4.2:1.1/0003:046D:C312.0007/input/input21 │ │ input:input21 "BTC USB Multimedia Keyboard" │ ├─/sys/devices/pci0000...000:00:1a.0/usb1/1-1/1-1.4/1-1.4.3/1-1.4.3:1.0/0003:0079:0006.0008/input/input22 │ │ input:input22 "DragonRise Inc. Generic USB Joystick " │ │ ├─/sys/devices/pci0000...0/usb1/1-1/1-1.4/1-1.4.3/1-1.4.3:1.0/0003:0079:0006.0008/input/input22/event19 │ │ │ input:event19 │ │ └─/sys/devices/pci0000...:1a.0/usb1/1-1/1-1.4/1-1.4.3/1-1.4.3:1.0/0003:0079:0006.0008/input/input22/js0 │ │ input:js0 │ └─/sys/devices/pci0000...000:00:1a.0/usb1/1-1/1-1.4/1-1.4.4/1-1.4.4:1.0/0003:0079:0006.0009/input/input23 │ input:input23 "DragonRise Inc. Generic USB Joystick " │ ├─/sys/devices/pci0000...0/usb1/1-1/1-1.4/1-1.4.4/1-1.4.4:1.0/0003:0079:0006.0009/input/input23/event20 │ │ input:event20 │ └─/sys/devices/pci0000...:1a.0/usb1/1-1/1-1.4/1-1.4.4/1-1.4.4:1.0/0003:0079:0006.0009/input/input23/js1 │ input:js1 └─/sys/devices/pci0000:00/0000:00:1e.0/0000:08:02.0/sound/card2 sound:card2 "Live" _______________________________________________ systemd-devel mailing list <a href="mailto:systemd-devel@lists.freedesktop.org" target="_blank">systemd-devel@lists.freedesktop.org</a> <a href="http://lists.freedesktop.org/mailman/listinfo/systemd-devel" target="_blank">http://lists.freedesktop.org/mailman/listinfo/systemd-devel</a> </blockquote></div>