Path: ...!news.mixmin.net!news.swapon.de!fu-berlin.de!uni-berlin.de!individual.net!not-for-mail
From: "Carlos E.R." <robin_listas@es.invalid>
Newsgroups: comp.os.linux.misc
Subject: Re: There he goes again
Date: Fri, 12 Jul 2024 21:09:36 +0200
Lines: 36
Message-ID: <gkb8mkxn8s.ln2@Telcontar.valinor>
References: <v69its$3dons$1@dont-email.me> <sG6s8v.B6nB@yahoo.com>
 <v6ar7b$3ngh6$2@dont-email.me> <v6ci5t$oq$1@dont-email.me>
 <v6cr5s$1kfb$1@dont-email.me> <leug5rFgsj3U2@mid.individual.net>
 <v6d3qp$6ida$1@dont-email.me> <lf0rmsFmm0pU7@mid.individual.net>
 <v6ht4l$12f54$8@dont-email.me> <lf4jceFgleeU1@mid.individual.net>
 <op.2qndugqla3w0dxdave@hodgins.homeip.net>
Mime-Version: 1.0
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 8bit
X-Trace: individual.net 0IHsw5F3kGylqG08KTiIIQPqfrz0QMDhKFx0gPIGoZ8EofMIS/
X-Orig-Path: Telcontar.valinor!not-for-mail
Cancel-Lock: sha1:qLW/j7bv7Tx0PKi84I0oSEt8l9g= sha256:mz4GuIRruiA24ZkpNSqk5Z0ZF0UzLcerBEk89uj2erQ=
User-Agent: Mozilla Thunderbird
Content-Language: es-ES, en-CA
In-Reply-To: <op.2qndugqla3w0dxdave@hodgins.homeip.net>
Bytes: 2367

On 2024-07-09 17:12, David W. Hodgins wrote:
> On Tue, 09 Jul 2024 06:57:18 -0400, Carlos E. R. 
> <robin_listas@es.invalid> wrote:
>> On 2024-07-09 01:35, Lawrence D'Oliveiro wrote:
>>> On Mon, 8 Jul 2024 02:54:52 +0200, Carlos E. R. wrote:
> <snip>
>>>> gparted is a GUI tool intended to be run as root.
>>> And we have seen what happens when it is.
>> That it works perfectly, as designed.
> 
> It increses the risk of things leaking to other user's on the system, if 
> not done
> properly.

!!

> 
> As to running gparted as a regular user ...
> $ ls -l /dev/sd?
> brw-rw---- 1 root disk 8,  0 Jul  8 20:54 /dev/sda
> brw-rw---- 1 root disk 8, 16 Jul  8 20:54 /dev/sdb
> brw-rw---- 1 root disk 8, 32 Jul  8 20:54 /dev/sdc
> brw-rw---- 1 root disk 8, 48 Jul  8 20:54 /dev/sdd
> brw-rw---- 1 root disk 8, 64 Jul  8 20:54 /dev/sde
> brw-rw---- 1 root disk 8, 80 Jul  8 20:54 /dev/sdf
> 
> I think member's of the disk group can do it as a regular user, but I 
> have not
> tested it to see if there are other issues.

Having my user belong to group "disk" increases the danger of the user 
doing something it shouldn't.

-- 
Cheers, Carlos.