search

eudev-project / eudev

Repository for eudev development
GNU General Public License v2.0
521 stars 145 forks source link

rules: set uinput group to "input" #258

Closed stacyharper closed 11 months ago

stacyharper commented 11 months ago

fix: https://gitlab.alpinelinux.org/alpine/aports/-/issues/15240

nekopsykose commented 11 months ago

this means any user in the input group can keylog the system, that is why nobody can access uinput by default

stacyharper commented 11 months ago

this means any user in the input group can keylog the system

Isn't this something accepted when giving the "input" group to some user?

that is why nobody can access uinput by default

What are alternatives to this?

stacyharper commented 11 months ago

About keyloging, where do you read uinput is a way to keylog physical system inputs?

nekopsykose commented 11 months ago

Isn't this something accepted when giving the "input" group to some user?

maybe, dunno

bbonev commented 11 months ago

I am wondering if SUBSYSTEM=="misc" should be input instead of misc

bbonev commented 11 months ago

According to the research I did, such type of rule is not included in systemd's udev. Also @nekopsykose have concerns about security and these look pretty valid. eudev have means for achieving this for a single user system by adding a custom rule file in /etc.