On Fri, 19 Oct 2001 Kinjal Sonpal wrote:
>Btw, for allowing all the users on my home PC system, chmoded
>/dev/modem to 777. Is this okay or is there some better
>>workaround? I did this becoz I read somewhere in our mail
>archives that one shud not dial-up as root for the sake of
>security reasons.
PCQ has the following advice:
(Do all this as root.)
Step 1: Add a group called 'dialout'.
Step 2: Add the required user accounts to this group.
Step 3: Type the following commands:
$ chown root.dialout /usr/sbin/kppp
$ chmod 4750 /usr/sbin/kppp
Step 4: Create a file /etc/kppp.allow and type the user names
of users who are in the dialout group, each user name on a
separate line.
The users should run /usr/sbin/kppp rather than /usr/bin/kppp.
(This is assuming you have a typical Red Hat installation in
which /usr/bin/kppp is a symbolic link to /usr/bin/consolehelper
and the actual binary is /usr/sbin/kppp.)