From owner-freebsd-net@FreeBSD.ORG  Thu Feb  7 19:09:56 2008
Return-Path: <owner-freebsd-net@FreeBSD.ORG>
Delivered-To: freebsd-net@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 3507E16A41A;
	Thu,  7 Feb 2008 19:09:56 +0000 (UTC)
	(envelope-from rea-fbsd@codelabs.ru)
Received: from 0.mx.codelabs.ru (0.mx.codelabs.ru [144.206.177.45])
	by mx1.freebsd.org (Postfix) with ESMTP id DAFF113C502;
	Thu,  7 Feb 2008 19:09:55 +0000 (UTC)
	(envelope-from rea-fbsd@codelabs.ru)
DomainKey-Signature: a=rsa-sha1; q=dns; c=simple; s=one; d=codelabs.ru;
	h=Received:Date:From:To:Cc:Message-ID:References:MIME-Version:Content-Type:Content-Disposition:In-Reply-To:Sender:X-Spam-Status:Subject;
	b=pOMJoZYuqKC90ArHBfvAEvMoTMNuQ4poOX1fjbwYd682xKbl/nS++9HYB5b1Y/qsWdmz3yd84UgXI8kXaz4w+gyJOkPCVKZ9zkB3spJ3qZMAJE7o0y8EOyEHsw/z4qWwVP6+X5L5Y9nMvPRFDJ/tksMmRYi3RRyxBB0XK8M0HT0=;
Received: from void.codelabs.ru (void.codelabs.ru [144.206.177.25])
	by 0.mx.codelabs.ru with esmtpsa (TLSv1:AES256-SHA:256)
	id 1JNC89-000BZi-Sc; Thu, 07 Feb 2008 22:09:53 +0300
Date: Thu, 7 Feb 2008 22:09:52 +0300
From: Eygene Ryabinkin <rea-fbsd@codelabs.ru>
To: Kevin Oberman <oberman@es.net>
Message-ID: <EWfFXqlDPOGuDPqUv/sfqlOAXfE@G5eHikUBJqgelgsfT8pvZv7m+/A>
References: <+Oslp5zezDUHSfXCT9N9C5qGZIo@4emqrsZRSNlbYTMRNETK7AEirXc>
	<20080207184604.217E345010@ptavv.es.net>
MIME-Version: 1.0
Content-Type: text/plain; charset=koi8-r
Content-Disposition: inline
In-Reply-To: <20080207184604.217E345010@ptavv.es.net>
Sender: rea-fbsd@codelabs.ru
X-Spam-Status: No, score=-1.8 required=4.0 tests=ALL_TRUSTED,AWL,BAYES_50
Cc: freebsd-net@freebsd.org, lysergius2001 <lysergius2001@gmail.com>,
	"Bruce M. Simpson" <bms@freebsd.org>, John-Mark Gurney <jmg@funkthat.com>
Subject: Re: modifying permissions in /dev
X-BeenThere: freebsd-net@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Networking and TCP/IP with FreeBSD <freebsd-net.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-net>
List-Post: <mailto:freebsd-net@freebsd.org>
List-Help: <mailto:freebsd-net-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 07 Feb 2008 19:09:56 -0000

Kevin, just a side note.

Thu, Feb 07, 2008 at 10:46:04AM -0800, Kevin Oberman wrote:
> > Set vfs.usermount=1 in /etc/sysctl.conf and restart sysctl via
> > '/etc/rc.d/sysctl restart'.  But be aware of security implications:
> > anyone will be able to mount devices that are opened to him/her via
> > filesystem permissions.
> 
> While adding "vfs.usermount=1" to /etc/sysctl is needed to make the
                                    ^^^^^^^^^^^
/etc/sysctl.conf, not just /etc/sysctl

> sysctl carry over reboots, you don't need to start sysctl again. Just:
> sysctl vfs.usermount=1
> will do the trick.

I had the impression that all this /etc/devfs.{rules,conf} stuff
was connected to the fact that lysergius wanted to keep the things
over reboots.  Otherwise simple 'chmod <whatever> <wherever>' will
go.  No?
-- 
Eygene