Subject: Re: secure, limited, privilege escalation (was: What's in my swap)
To: NetBSD-current Users's Discussion List <current-users@netbsd.org>
From: oliver gould <ogould@cs.stevens.edu>
List: current-users
Date: 08/06/2006 16:57:17
--ew6BAiZeqk4r7MaW
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On 2006-08-05 12:06 -0500, Geert Hendrickx wrote:
> Another practical example is to allow console users to mount (and perhaps
> newfs) floppies, USB devices, CD's (s/newfs/cdrecord/).  How would you
> solve that on a typical desktop machine? =20

What about amd(8)?  Once users figure out how to use it (especially the
*unmounting* part), it works pretty well.  This of course, doesn't solve
the newfs/cdrecord problem so we use sudo(1) for those.

--=20
  .oliver

--ew6BAiZeqk4r7MaW
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.3 (NetBSD)

iD8DBQFE1letNtBooygWxWcRAnv6AKCize9E1TIcRC5VeZGqoVpDCoILpACgqsTM
iIZUP/UB/SaOj1YUMXRLcCY=
=qLd+
-----END PGP SIGNATURE-----

--ew6BAiZeqk4r7MaW--