Can remote users control the scanner(s) too?

J.B. Nicholson-Owens jbn at forestfield.org
Wed Sep 29 06:43:53 UTC 2004


Oliver Grawert wrote:
> why should someone (for whom you would indeed have to set up an account
> before) want to use a scanner remote ??

Under ordinary situations with cooperative people, they wouldn't use a scanner 
remotely.  The trouble is, people aren't always cooperative and proper system 
administration should make the scanner available only to the person at the console.

The problem here is more along the line of a denial of service.  If a user is 
in the scanners group they can run a program which could do something with the 
scanner (such as scanning) and that program will work.  For a user at the 
console, this is fine.  For a user not at the console, this can be bad because 
remote users would effectively make the scanner unavailable to the person at 
the console.  I think most people consider scanners something used only by the 
person at the console, not any of the other users accessing their account remotely.

In a followup to my question, Nathaniel McCallum said that a system call would 
be needed to do this in the right way.  I'm guessing that a revoke() system 
call would be better than a shell script that adds the just-logged-on console 
user to the scanner group (and another shell script that removes the 
just-logged-off console user from the scanner group) because shell scripts 
wouldn't prevent someone from logging out at the same time as they launch a 
background process which hogs the scanner, thus preventing the next user at the 
console from using the scanner.




More information about the ubuntu-users mailing list