We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
udev-50-tenstorrent.rules (referenced by dkms-post-install) assigns MODE="0666" to the device file.
udev-50-tenstorrent.rules
dkms-post-install
MODE="0666"
This is considered insecure, as it gives not just human users but any system services/daemons (including web servers) write access to the hardware.
Better would be to assign MODE="0660" and optionally a suitable group. The users who should have access can then get that group assigned individually.
MODE="0660"
It's trivial to not install this rule in distro packages, but it would probably be good to fix this for dkms users, too.
dkms
The text was updated successfully, but these errors were encountered:
Nice to have - moving to P2 for now, will bump up to P1 if critical.
Sorry, something went wrong.
warthog9
No branches or pull requests
udev-50-tenstorrent.rules
(referenced bydkms-post-install
) assignsMODE="0666"
to the device file.This is considered insecure, as it gives not just human users but any system services/daemons (including web servers) write access to the hardware.
Better would be to assign
MODE="0660"
and optionally a suitable group. The users who should have access can then get that group assigned individually.It's trivial to not install this rule in distro packages, but it would probably be good to fix this for
dkms
users, too.The text was updated successfully, but these errors were encountered: