1

When I need to run a program with direct disk access, like read/write from /dev/sdb, I simply add the user to 'disk' group. In this way we don't need to disclose the root account the the user. However the user would also be able to access any other disks on the same machine.

Is there any finer-grained access control over this need? Could we assign full-access of disks, volumes, or volume groups to some users or groups? When a user need a physical disk to do his own stuff, I won't have the concern that he may destroy the other parts of the system.

(I tried to set owner of a /dev/sdb to a users, but it does not work.)

Anthon
  • 78,313
  • 42
  • 165
  • 222
wuxb
  • 215
  • 1
  • 5
  • @Gilles I'm not sure that both are dupes, this one seems more about accessing a particular device without allowing access to others, while the other question is about how to access all disks. – Braiam Oct 15 '14 at 00:22
  • @Braiam Both questions are about accessing one particular device. Patrick's answer covers both cases. – Gilles 'SO- stop being evil' Oct 15 '14 at 00:29

0 Answers0