Users and permissions: accounts, login, enforced file permissions, setuid, su, passwd, doas
The kernel now checks owner/group/other on open, create, unlink, rename, exec and path search; honours set-user-id and set-group-id; restricts kill, mount, reboot and mknod; keeps supplementary groups; and implements chown. devtmpfs nodes carry owners and modes that chmod/chown keep. Terminals run login, the image has root and schos, X starts as the ordinary user. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01EVRhxi9zpdW2uDUN4FVcao
This commit is contained in:
parent
b3f72cd95e
commit
020aa6113c
34 changed files with 1342 additions and 120 deletions
14
etc/udev-schos.rules
Normal file
14
etc/udev-schos.rules
Normal file
|
|
@ -0,0 +1,14 @@
|
|||
# SchOS's own device permissions, applied after Alpine's (the name sorts last
|
||||
# once installed as 90-schos.rules).
|
||||
#
|
||||
# The kernel makes these nodes with the permissions it means them to have
|
||||
# (kernel/fs/devfs.c). udev, with no rule that names a node, would chmod it to
|
||||
# 0600 -- which made /dev/null unusable to everyone but root -- so every kernel
|
||||
# device is named here with the same answer the kernel gave.
|
||||
|
||||
SUBSYSTEM=="mem", MODE="0666"
|
||||
SUBSYSTEM=="tty", KERNEL=="console", GROUP="root", MODE="0600"
|
||||
SUBSYSTEM=="tty", KERNEL=="tty0|tty[0-9]|tty1[0-2]", GROUP="tty", MODE="0660"
|
||||
SUBSYSTEM=="input", GROUP="input", MODE="0660"
|
||||
SUBSYSTEM=="graphics", GROUP="video", MODE="0660"
|
||||
SUBSYSTEM=="block", GROUP="disk", MODE="0660"
|
||||
Loading…
Reference in a new issue