Thomas Vander Stichele (thomas(a)apestaart.org) said:
> > I seem to recall a long-winded discussion about the
fedora-usermgmt
> > package. Perhaps it's time to move it into Core and make it responsible
> > for creating the groups if needed.
>
> Dynamically modified groups + setgid programs are a poor solution for
> device access.
>
> Runtime ACLs done via HAL is probably a better solution - I remember
> Colin having some ideas in this area.
There is always a $(SOLUTION + 1) to any problem. I don't particularly
see that as being a good reason to not do something useful to solve this
problem in the meantime, especially if the mentioned $(SOLUTION + 1) is
vaporware :)
Well, it depends on what you need. If you need a daemon to have
access to the devices, groups are perfectly fine. If you want
to dynamically add and remove users, groups are *bad*, as
Alan mentioned.
Bill