Tomasz Torcz escreveu:
Dnia 10-03-2008, pon o godzinie 23:25 -0300, Juan Carlos Castro y Castro
pisze:
OK, now it got weird. I see the permissions in /dev/snd don't actually
change - they're permanently at 0660, owner root:root - and yet I can
play sound from a ssh session as a common user. But not from a VNC server.
Permissions do not change. ACLs do. ACLs are in unix world since 1995 or longer. ACL are available in linux since about 2001. People should get used to them already.
Ah, I see them now. I know what ACLs are, it's just that it's been so
long since I saw any use of them that I forgot! But yet -- some mystery
remains. When I log in as jcastro, I see someone (ConsoleKit?) does
create the ACLs for jcastro. BUT, then I go to Ctrl-Alt-F1 and log on as
gabi. User gabi then becomes able to play sound with aplay, but ONLY
from that console; if I log in as gabi from ssh -- even while the same
user is logged in from the console -- gabi at ssh can't play and gabi at
console can!!! And there's no ACLs for gabi! Here's the listing:
[root@jcacer ~]# getfacl -Rs /dev/snd
getfacl: Removing leading '/' from absolute path names
# file: dev/snd/pcmC1D0c
# owner: root
# group: root
user::rw-
user:gdm:rw-
user:jcastro:rw-
group::rw-
mask::rw-
other::---
# file: dev/snd/controlC1
# owner: root
# group: root
user::rw-
user:gdm:rw-
user:jcastro:rw-
group::rw-
mask::rw-
other::---
# file: dev/snd/pcmC1D0p
# owner: root
# group: root
user::rw-
user:gdm:rw-
user:jcastro:rw-
group::rw-
mask::rw-
other::---
# file: dev/snd/controlC0
# owner: root
# group: root
user::rw-
user:gdm:rw-
user:jcastro:rw-
group::rw-
mask::rw-
other::---
# file: dev/snd/pcmC0D6c
# owner: root
# group: root
user::rw-
user:gdm:rw-
user:jcastro:rw-
group::rw-
mask::rw-
other::---
# file: dev/snd/pcmC0D0c
# owner: root
# group: root
user::rw-
user:gdm:rw-
user:jcastro:rw-
group::rw-
mask::rw-
other::---
# file: dev/snd/pcmC0D0p
# owner: root
# group: root
user::rw-
user:gdm:rw-
user:jcastro:rw-
group::rw-
mask::rw-
other::---
# file: dev/snd/hwC0D0
# owner: root
# group: root
user::rw-
user:gdm:rw-
user:jcastro:rw-
group::rw-
mask::rw-
other::---
# file: dev/snd/pcmC0D1p
# owner: root
# group: root
user::rw-
user:gdm:rw-
user:jcastro:rw-
group::rw-
mask::rw-
other::---
# file: dev/snd/hwC0D1
# owner: root
# group: root
user::rw-
user:gdm:rw-
user:jcastro:rw-
group::rw-
mask::rw-
other::---
# file: dev/snd/pcmC0D2c
# owner: root
# group: root
user::rw-
user:gdm:rw-
user:jcastro:rw-
group::rw-
mask::rw-
other::---
# file: dev/snd/pcmC0D6p
# owner: root
# group: root
user::rw-
user:gdm:rw-
user:jcastro:rw-
group::rw-
mask::rw-
other::---
# file: dev/snd/seq
# owner: root
# group: root
user::rw-
user:gdm:rw-
user:jcastro:rw-
group::rw-
mask::rw-
other::---
# file: dev/snd/timer
# owner: root
# group: root
user::rw-
user:gdm:rw-
user:jcastro:rw-
group::rw-
mask::rw-
other::---
