[PATCH] set required mount privileges via fdi file
Artem Kachitchkine
Artem.Kachitchkin at Sun.COM
Wed Jul 19 09:34:27 PDT 2006
> So in
> order to only allow Dave to mount "Dave's usb key" you just have to
> create an fdi file
I would expect that to manipulate _privileges_ you'd want to manipulate
_privilege_ files, not fdi files. I think "resources" serve the purpose
you describe, i.e. to allow Dave mount "Dave's usb key" you'd add
something like:
Allow=dave:/org/freedesktop/Hal/devices/volume_dave_s_usb_key
Not sure about the syntax (we don't use txt backend on Solaris). It
would probably be a good idea to expand resource specification format to
make it more human-friendly. Eventually though, admins would only have
to use polkit-grant-privilege instead of messing up with the files
directly, which also has the advantage of abstracting the backend format.
-Artem.
More information about the hal
mailing list