W dniu 27.02.2024 o 22:27, Justin Forbes pisze:
In practice, this isn't that much of a lockdown for most fedora users.
We give the default user on a system wheel access which means both
'sudo dmesg' and 'journalctl -k' work as is.
You wish...
$ id
uid=1003(marcin) gid=1006(marcin)
groups=1006(marcin),10(wheel),11(cdrom),18(dialout),39(video),63(audio),100(users),135(mock),948(render),960(libvirt),986(wireshark),1003(docker)
context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023
$ dmesg
dmesg: read kernel buffer failed: Operation not permitted
$ uname -a
Linux puchatek.local 6.8.0-0.rc5.41.fc40.x86_64 #1 SMP PREEMPT_DYNAMIC
Mon Feb 19 14:19:27 UTC 2024 x86_64 GNU/Linux
--
_______________________________________________
devel mailing list -- devel@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to devel-leave@xxxxxxxxxxxxxxxxxxxxxxx
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/devel@xxxxxxxxxxxxxxxxxxxxxxx
Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
