Change from audio group to something else

[Jonas Smedegaard]

Quoting Kaj Ailomaa (2014-10-26 23:39:38)
> 
> 
> On Sun, Oct 26, 2014, at 11:14 PM, Jonas Smedegaard wrote:
>> Not sure if you still consider use of classic POSIX group for this, 
>> just renaing to be another than audio.  If you do, then let me try 
>> again to explain my point:
>> 
>> The Ubuntu wiki page mentions the reason for avoiding static Audio 
>> group being that it grants users control over audio devices, even 
>> when not logged in (you can start a long-running backgorund job or a 
>> cron job).
>> 
>> Now, if realtime tasks are defined using POSIX group then it 
>> similarly grants users control over the ability to freeze the system, 
>> even when not logged in.
>> 
>> If not possible to move away from POSIX group, I see no reason to 
>> change from group "audio" to group "jack" or "jackuser" - other than 
>> being in sync with other distros, but what 's the actual benefit of 
>> that?
>> 
>> 
>
> I see your point more clearly now. 
> I do however think that as longer as pam and groups are used, it would 
> be better to use another group name, and since other Debian based 
> distros (who share the jack packages) will likely not adopt having 
> audio a default user group could more easily be persuaded to add one 
> if it was specific for jack. It would simplify installing jack on all 
> Debian based and thus improve user experience with floss audio 
> software in general.

Right - I agree that it is a lesser evil to grant one risky feature 
without needing to additionally grant another risky feature.


> After your reply I am more willing to experiment with cgroups in order 
> to see how that can be used.

Far better if you - or anyone - could figure that out, yes.


 - Jonas

-- 
 * Jonas Smedegaard - idealist & Internet-arkitekt
 * Tlf.: +45 40843136  Website: http://dr.jones.dk/

 [x] quote me freely  [ ] ask before reusing  [ ] keep private
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 949 bytes
Desc: signature
URL: <http://lists.alioth.debian.org/pipermail/pkg-multimedia-maintainers/attachments/20141027/6d1d567f/attachment.sig>