From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from pigeon.gentoo.org ([69.77.167.62] helo=lists.gentoo.org) by finch.gentoo.org with esmtp (Exim 4.60) (envelope-from ) id 1L2eL9-0002Wl-Hz for garchives@archives.gentoo.org; Wed, 19 Nov 2008 04:06:55 +0000 Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id EC2B2E034B; Wed, 19 Nov 2008 04:06:55 +0000 (UTC) Received: from out1.smtp.messagingengine.com (out1.smtp.messagingengine.com [66.111.4.25]) by pigeon.gentoo.org (Postfix) with ESMTP id D4BFDE034B for ; Wed, 19 Nov 2008 04:06:55 +0000 (UTC) Received: from compute1.internal (compute1.internal [10.202.2.41]) by out1.messagingengine.com (Postfix) with ESMTP id 0F5461B7614 for ; Tue, 18 Nov 2008 23:06:54 -0500 (EST) Received: from heartbeat1.messagingengine.com ([10.202.2.160]) by compute1.internal (MEProxy); Tue, 18 Nov 2008 23:06:54 -0500 X-Sasl-enc: Qt8drDymTpPNdDMZgfkElu0K7poKoh7NWFL2Son2VZQQ 1227067613 Received: from [192.168.31.10] (cpe-071-077-032-150.nc.res.rr.com [71.77.32.150]) by www.fastmail.fm (Postfix) with ESMTPSA id AD47018E68 for ; Tue, 18 Nov 2008 23:06:53 -0500 (EST) Subject: Re: [gentoo-user] Deny flash to a specific user? From: Albert Hopkins To: gentoo-user@lists.gentoo.org In-Reply-To: <5bdc1c8b0811181729v5e92cc0fh701faab1b02bd869@mail.gmail.com> References: <5bdc1c8b0811181729v5e92cc0fh701faab1b02bd869@mail.gmail.com> Content-Type: text/plain Date: Tue, 18 Nov 2008 23:06:52 -0500 Message-Id: <1227067612.16932.5.camel@blackwidow.nbk> Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-user@lists.gentoo.org Reply-to: gentoo-user@lists.gentoo.org Mime-Version: 1.0 X-Mailer: Evolution 2.22.3.1 Content-Transfer-Encoding: 7bit X-Archives-Salt: 49842f60-bd27-435a-a7e7-cf5cd07aee43 X-Archives-Hash: 0b35999d4291f91f0b7928d93e912462 On Tue, 2008-11-18 at 17:29 -0800, Mark Knecht wrote: > Is there a way to do this using normal system configuration methods? > Some group that controls access maybe? > > Thanks, > Mark > Why do you want to do this? You could do something similar to: # groupadd flashusers # chgrp flashusers /opt/netscape/plugins/libflashplayer.so # chmod 0750 /opt/netscape/plugins/libflashplayer.so # gpasswd -a niceguy flashusers However that doesn't prevent a user from installing their own version of flash (mount -o remount,noexec /home might). But I don't understand why. What is your justification for doing that? -a