Re: [gentoo-hardened] sys-apps/pcsc-lite needs to access /sys

[Sven Vermeulen]

On Sat, Feb 15, 2014 at 06:03:28PM +0100, Luis Ressel wrote:
> I've had a first look at this. Sadly, there's no gid mount option for
> sysfs. Another complication is that the group isn't granted any rights
> anyway.
>
> I'll examine what changes to the kernel would be neccessary. (For sure,
> one could also create an init script with chown/chmod, but that seems a
> bit messy.)

The init script approach is what most distributions are doing. We also
relabel cpu/online in the selinux_gentoo init script.

But the approach you mentioned on the other mailinglist (regarding reusing
the statement already in use for /proc stuff) seems like a valid case -
interesting to see what's going to happen ;)

Wkr,
	Sven Vermeulen