dev/console catch 22

[Mike Frysinger]

On Tuesday 19 June 2007, Hamish Moffatt wrote:
> On Tue, Jun 19, 2007 at 09:52:27AM -0400, Mike Frysinger wrote:
> > On Tuesday 19 June 2007, Michael Cashwell wrote:
> > > So the file hierarchy served by the NFS server must be written by the a
> > > host process and I still have the issue of needing elevated privileges
> > > to do that for the special console node.
> >
> > i dont really buy this ... only the root user can set up NFS exports and
> > in order for it to be usable by the embedded machine, it has to have root
> > access ... so basically, your system is already insecure so giving away
> > sudo to everyone is exactly the same
>
> Maybe you could run the user-space NFS server inside fakeroot? ;)

fakeroot only stops dynamic applications ... it does not work on static
-mike
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 827 bytes
Desc: This is a digitally signed message part.
Url : http://lists.busybox.net/pipermail/busybox/attachments/20070620/80fd1ac9/attachment-0002.pgp