[PATCH] set required mount privileges via fdi file

Artem Kachitchkine Artem.Kachitchkin at Sun.COM
Wed Jul 19 09:34:27 PDT 2006


> So in
> order to only allow Dave to mount "Dave's usb key" you just have to
> create an fdi file

I would expect that to manipulate _privileges_ you'd want to manipulate 
_privilege_ files, not fdi files. I think "resources" serve the purpose 
you describe, i.e. to allow Dave mount "Dave's usb key" you'd add 
something like:

Allow=dave:/org/freedesktop/Hal/devices/volume_dave_s_usb_key

Not sure about the syntax (we don't use txt backend on Solaris). It 
would probably be a good idea to expand resource specification format to 
make it more human-friendly. Eventually though, admins would only have 
to use polkit-grant-privilege instead of messing up with the files 
directly, which also has the advantage of abstracting the backend format.

-Artem.



More information about the hal mailing list