pam_group (Was: ubuntu-xxx ....)

[Matthew Garrett]

On Fri, 2005-04-08 at 21:28 -0500, Jerry Haltom wrote:

> If nothing else this seems like something I'd want configurable in some
> sort of templatable policy. For desktops I would install with cdrom
> readable by everybody, for servers I wouldn't.

If the machines are going to be effectively single user, then just make
the device nodes readable and writable by all. There's no advantage to
pam_group in this case.

-- 
Matthew Garrett | mjg59 at srcf.ucam.org