On 28/02/2024 10:05, Marcin Juszkiewicz wrote:
W dniu 27.02.2024 o 22:27, Justin Forbes pisze:
> In practice, this isn't that much of a lockdown for most fedora users.
> We give the default user on a system wheel access which means both
> 'sudo dmesg' and 'journalctl -k' work as is.
You wish...
$ id
uid=1003(marcin) gid=1006(marcin)
groups=1006(marcin),10(wheel),11(cdrom),18(dialout),39(video),63(audio),100(users),135(mock),948(render),960(libvirt),986(wireshark),1003(docker)
context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023
$ dmesg
dmesg: read kernel buffer failed: Operation not permitted
$ uname -a
Linux puchatek.local 6.8.0-0.rc5.41.fc40.x86_64 #1 SMP PREEMPT_DYNAMIC
Mon Feb 19 14:19:27 UTC 2024 x86_64 GNU/Linux
Which proves what? You did "dmesg" not "sudo dmesg" or
"journalctl -k".
Tom
--
Tom Hughes (tom(a)compton.nu)
http://compton.nu/