From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from lists.gentoo.org ([140.105.134.102] helo=robin.gentoo.org) by nuthatch.gentoo.org with esmtp (Exim 4.43) id 1E3fH9-0006Yv-Ip for garchives@archives.gentoo.org; Fri, 12 Aug 2005 19:33:07 +0000 Received: from robin.gentoo.org (localhost [127.0.0.1]) by robin.gentoo.org (8.13.4/8.13.4) with SMTP id j7CJWGZY009251; Fri, 12 Aug 2005 19:32:16 GMT Received: from smtp.istop.com (smtp.istop.com [66.11.167.126]) by robin.gentoo.org (8.13.4/8.13.4) with ESMTP id j7CJSYo2002976 for ; Fri, 12 Aug 2005 19:28:34 GMT Received: from waltdnes.org (i216-58-43-100.glen-net.ca [216.58.43.100]) by smtp.istop.com (Postfix) with SMTP id 3F4142B3C3 for ; Fri, 12 Aug 2005 15:44:22 -0400 (EDT) Received: by waltdnes.org (sSMTP sendmail emulation); Fri, 12 Aug 2005 15:28:33 -0400 From: "Walter Dnes" Date: Fri, 12 Aug 2005 15:28:33 -0400 To: gentoo-user@lists.gentoo.org Subject: Re: [gentoo-user] Re: Sound not working for user Message-ID: <20050812192833.GA9496@waltdnes.org> References: <49bf44f105081201382d2a7e77@mail.gmail.com> <3212b1a805081202125bd42ae@mail.gmail.com> <49bf44f10508120543735af181@mail.gmail.com> Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-user@gentoo.org Reply-to: gentoo-user@lists.gentoo.org Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <49bf44f10508120543735af181@mail.gmail.com> User-Agent: Mutt/1.5.8i X-Archives-Salt: 03189460-3b65-45bc-a37e-d1e4b2d95fbd X-Archives-Hash: 754fe90170b0041b6c1724260ab0279b On Fri, Aug 12, 2005 at 05:43:16AM -0700, Grant wrote > Actually it looks like rebooting after adding the user to the audio > group has fixed this. Does that make sense? It's actually PAM that's screwing things up. There are two long-term solutions... 1) remove PAM altogether, which I eventually did, and am very happy with. Note, you have to be careful. 2) comment out all the entries in the specific PAM config file that sets permissions for devices. My main machine totally died on me last night, so I have to check the Gentoo archive on the web. I think the file you want to modify is /etc/security/console.perms by commenting out the line... 0660 0660 root.audio Thanks to other problems, I eventually commented out the entire file. A few more problems, and I dumped PAM entirely. IMHO, PAM belongs in the optional hardened security configs, along with NSA Selinux, etc. If you're an ISP offering shell access to several thousand customers, PAM makes sense. However, it is *NOT* necessary for the average desktop, and only gets in the way. -- Walter Dnes My musings on technology and security at http://tech_sec.blog.ca -- gentoo-user@gentoo.org mailing list