Re: Suggested dual human/binary interface for proc/devfs

[Albert D. Cahalan]

Ion Badulescu writes:
> On Sat, 15 Apr 2000, Albert D. Cahalan wrote:
>
>>> The chown-ing on console login (or some similar method
>>> through devfs/devfsd) is the cleanest way to do this.
>> 
>> If that is the cleanest way, I'd hate to see the less clean ways.
>
> If putting custom checks for custom GID's in the kernel is your idea of
> "clean way"... I'd suggest turning to Microsoft or one of the
> implement-everything-the-customer-suggests Unix vendors for your needs.

I kept it generic. Nowhere did I say there would be GID values
compiled into the kernel, nor did I say anything about the kernel
knowing about the "console user" concept. The two alternate
proposals are suitable for "remote user" too, at the same time.

For the first choice:
echo "90 91 92" > /proc/sys/kernel/restricted-uid

The second choice requires a setgroups() replacement.
I favor this choice, for both power and performance.