Re: EMC in secure mode

[Paul <paul.corner-at-tesco.net>]

Hi Babar

The first thing to bear in mind is that loading of kernel modules is only 
permitted by the 'root' user, second, writing to an IO port is also a 
priviledged task. The easiest way round this is to set some of the system 
programs to allow any user to execute them. For a BDI-2.xx install, do the 
following :-

chmod u+s /sbin/insmod /sbin/lsmod /sbin/rmmod
chmod u+s /usr/local/emc/plat/nonrealtime/bin/bridgeportio
chmod u+s /usr/local/emc/plat/nonrealtime/bin/minimillio
chmod u+s /usr/local/emc/plat/nonrealtime/bin/iosh
chmod a+rw /dev/mem /dev/mbuff

You may also need to change the permissions of ls by :-

chmod u+s /bin/ls

Finally, I would recommend that the run and ini files are set to read only by 
doing a :-

chmod a-w /usr/local/emc/*.ini
chmod a-w /usr/local/emc/*.run

Most of these commands have been taken from the EMC faq at www.linuxcnc.org 
which is always a usefull source of information.

Regards, Paul.



On Tuesday 24 Dec 2002 9:40 am, Babar wrote:
> I've already added an account "user" with no password
> option so that machine operators can login only
> through this account.
> I've also created the links on desktop for this "user"
> account to run EMC but when clicked from this "user"
> account the emc lauches along with its picture
> and disapears.