Package: hal Version: 0.4.7-2 Severity: important There is an obvious problem with the current default setup of HAL: The hald deamon is configured to drop its privileges and use the restricted user "hal", the udev config files are designed to use that user as well.
The problem is that fstab-sync, which is called by hald to edit the fstab according to hal events, inherits the restricted privileges and thus is unable to edit fstab. I hack-fixed that by setting fstab-sync suid root, but of course this is not a better idea than redesigning the whole hald back to full provileges (both could be considered as unnecessary security risks). Other ideas would be to allow group "hal" to edit fstab (would be rather unusual and radical), or, even much more radical, to redesign fstab in some way, e.g. to make /etc/fstab a named pipe which is controlled by kind of a fstab-syncd to output the dynamic content... Anyway, the problem is simple, but it breaks the chain. Usability depends a lot on dynamic hardware mounting. Greetings, Brian Tarasinski -- System Information: Debian Release: 3.1 APT prefers testing APT policy: (500, 'testing') Architecture: i386 (i686) Kernel: Linux 2.6.8-1-386 Locale: LANG=en_GB, LC_CTYPE=en_GB (charmap=ISO-8859-1) Versions of packages hal depends on: ii adduser 3.63 Add and remove users and groups ii dbus-1 0.23-1 simple interprocess messaging syst ii dbus-glib-1 0.23-1 simple interprocess messaging syst ii libc6 2.3.2.ds1-20 GNU C Library: Shared libraries an ii libcap1 1:1.10-14 support for getting/setting POSIX. ii libexpat1 1.95.8-1 XML parsing C library - runtime li ii libglib2.0-0 2.6.2-1 The GLib library of C routines ii libhal-storage0 0.4.7-2 Hardware Abstraction Layer - share ii libhal0 0.4.7-2 Hardware Abstraction Layer - share ii libpopt0 1.7-5 lib for parsing cmdline parameters ii pciutils 1:2.1.11-15 Linux PCI Utilities ii udev 0.053-1 /dev/ management daemon ii usbutils 0.70-1 USB console utilities -- no debconf information -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
