[sane-devel] hal fdi rules to grant user "saned" access to scanner devices

Jochen Eisinger jochen at penguin-breeder.org
Thu Dec 18 18:39:33 UTC 2008


Hi,

I don't know whether somebody came up with a similar or better solution,
so here's mine:

On new linux installations, where hal is used to manage device access
rights, the old way of granting user saned access rights to scanners by
adding the user to the group scanner or so no longer works. hal will add
and remove individual users to the acl of the device file, while the
file itself is owned by root.

Adding the following rule to /etc/hal/fdi/policy/saned.fdi also adds
user saned to the acl:

<?xml version="1.0" encoding="UTF-8"?>
<deviceinfo version="0.2">
  <device>
    <match key="info.capabilities" contains="access_control">
      <match key="access_control.type" contains="scanner">
        <append key="access_control.grant_user"
type="strlist">saned</append>
      </match>
    </match>
  </device>
</deviceinfo>

if nobody comes up with a better idea, i'll include this on the saned
troubleshooting webpage soon

regards
-- jochen



More information about the sane-devel mailing list