[ConsoleKit] Permissions with consolekit and gdm

[Ray Strode]

Hi,

On Fri, Jul 2, 2010 at 2:45 AM, Christoph Pleger
<Christoph.Pleger at cs.tu-dortmund.de> wrote:
> Hello,
>
> I have been using pam_devperm.so for a long time. pam_devperm.so is a
> PAM module that, with my configuration, changes the ownerships and
> permissions of some device nodes in /dev when a user logs in on :0, so
> that the device nodes belong to that user and get permissions 600.
>
> Now I realized that if consolekit is installed and additionally gdm is
> used as display manager, the permissions of the device nodes are set to
> 600, but then they are reset to 660.
>
> What does consolekit do that causes the permissions to be changed if
> gdm is used as display manager?
ConsoleKit has a callouts mechanism that gets called when the user
changes VTs and for other reasons.  See the directories:

/usr/lib/ConsoleKit/run-seat.d
and
/usr/lib/ConsoleKit/run-session.d

udev installs a helper application in one of the directories to manage
device acls for the user on the currently active VT.   If you're using
udev, then this is probably what you're seeing.

--Ray