How do operator/wheel groups work on FreeBSD? Announcing the arrival of Valued Associate #679:...

Is CEO the "profession" with the most psychopaths?

Morning, Afternoon, Night Kanji

Why do early math courses focus on the cross sections of a cone and not on other 3D objects?

As a beginner, should I get a Squier Strat with a SSS config or a HSS?

ArcGIS Pro Python arcpy.CreatePersonalGDB_management

Why does the remaining Rebel fleet at the end of Rogue One seem dramatically larger than the one in A New Hope?

Is there any word for a place full of confusion?

Selecting user stories during sprint planning

How to compare two different files line by line in unix?

Can a new player join a group only when a new campaign starts?

What is "gratricide"?

Why weren't discrete x86 CPUs ever used in game hardware?

What's the meaning of "fortified infraction restraint"?

Converted a Scalar function to a TVF function for parallel execution-Still running in Serial mode

Effects on objects due to a brief relocation of massive amounts of mass

Project Euler #1 in C++

Is it possible for SQL statements to execute concurrently within a single session in SQL Server?

What is the difference between globalisation and imperialism?

Illegal assignment from sObject to Id

What is a fractional matching?

Take 2! Is this homebrew Lady of Pain warlock patron balanced?

How would a mousetrap for use in space work?

AppleTVs create a chatty alternate WiFi network

How does light 'choose' between wave and particle behaviour?



How do operator/wheel groups work on FreeBSD?



Announcing the arrival of Valued Associate #679: Cesar Manara
Planned maintenance scheduled April 23, 2019 at 00:00UTC (8:00pm US/Eastern)
2019 Community Moderator Election Results
Why I closed the “Why is Kali so hard” questionHow to set up file permissions/ownership for FTP/Apache/PHP on CentOSWhy is root in wheel and operator? Can root being in a group ever make a difference?Read files owned by another user as non-rootFreeBSD can't mount fdesc?Why does 'cat useradd' succeed in this case?Difference between sudo user and root userAutomount USB Storage Permissions Issue; FreeBSD 10.3How do I assign appropriate permissions on a Netatalk share?Why can the permissions of /sys directories vary across systems?Non-root read access to /dev/mem by kmem group members fails





.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty{ margin-bottom:0;
}







1















On FreeBSD 12.0-RELEASE-p3 ls -l /dev/ada1 gives me:



crw-r-----  1 root  operator [skipped] /dev/ada1


If I use the command gpart recover /dev/ada1 from a non-root user account, who is in the group operator (and wheel), gpart does the recovery. It definitely writes on the disk.



But why does the non-root user not just have read permissions for the disk? The group operator has only read permissions for /dev/ada1!



The sudoers file only consists of:



% grep -v '^#' /usr/local/etc/sudoers | grep -v '^$'
root ALL=(ALL) ALL









share|improve this question

























  • Check /usr/local/etc/sudoers

    – Vladimir Botka
    5 hours ago






  • 2





    @VladimirBotka I don't see how this can be the reason…

    – wolf-revo-cats
    5 hours ago


















1















On FreeBSD 12.0-RELEASE-p3 ls -l /dev/ada1 gives me:



crw-r-----  1 root  operator [skipped] /dev/ada1


If I use the command gpart recover /dev/ada1 from a non-root user account, who is in the group operator (and wheel), gpart does the recovery. It definitely writes on the disk.



But why does the non-root user not just have read permissions for the disk? The group operator has only read permissions for /dev/ada1!



The sudoers file only consists of:



% grep -v '^#' /usr/local/etc/sudoers | grep -v '^$'
root ALL=(ALL) ALL









share|improve this question

























  • Check /usr/local/etc/sudoers

    – Vladimir Botka
    5 hours ago






  • 2





    @VladimirBotka I don't see how this can be the reason…

    – wolf-revo-cats
    5 hours ago














1












1








1








On FreeBSD 12.0-RELEASE-p3 ls -l /dev/ada1 gives me:



crw-r-----  1 root  operator [skipped] /dev/ada1


If I use the command gpart recover /dev/ada1 from a non-root user account, who is in the group operator (and wheel), gpart does the recovery. It definitely writes on the disk.



But why does the non-root user not just have read permissions for the disk? The group operator has only read permissions for /dev/ada1!



The sudoers file only consists of:



% grep -v '^#' /usr/local/etc/sudoers | grep -v '^$'
root ALL=(ALL) ALL









share|improve this question
















On FreeBSD 12.0-RELEASE-p3 ls -l /dev/ada1 gives me:



crw-r-----  1 root  operator [skipped] /dev/ada1


If I use the command gpart recover /dev/ada1 from a non-root user account, who is in the group operator (and wheel), gpart does the recovery. It definitely writes on the disk.



But why does the non-root user not just have read permissions for the disk? The group operator has only read permissions for /dev/ada1!



The sudoers file only consists of:



% grep -v '^#' /usr/local/etc/sudoers | grep -v '^$'
root ALL=(ALL) ALL






permissions freebsd






share|improve this question















share|improve this question













share|improve this question




share|improve this question








edited 3 hours ago









mosvy

10.3k11238




10.3k11238










asked 6 hours ago









wolf-revo-catswolf-revo-cats

9021036




9021036













  • Check /usr/local/etc/sudoers

    – Vladimir Botka
    5 hours ago






  • 2





    @VladimirBotka I don't see how this can be the reason…

    – wolf-revo-cats
    5 hours ago



















  • Check /usr/local/etc/sudoers

    – Vladimir Botka
    5 hours ago






  • 2





    @VladimirBotka I don't see how this can be the reason…

    – wolf-revo-cats
    5 hours ago

















Check /usr/local/etc/sudoers

– Vladimir Botka
5 hours ago





Check /usr/local/etc/sudoers

– Vladimir Botka
5 hours ago




2




2





@VladimirBotka I don't see how this can be the reason…

– wolf-revo-cats
5 hours ago





@VladimirBotka I don't see how this can be the reason…

– wolf-revo-cats
5 hours ago










1 Answer
1






active

oldest

votes


















1














The gpart(1) program doesn't write anything to /dev/ada1.



It does all its operations by issuing GEOM_CTL ioctls on /dev/geom.ctl. In order to use ioctl(2) on a device file, you don't need write permissions to it; you only need to be able to open() it in read-only mode. And the operator group has read permissions on /dev/geom.ctl.






share|improve this answer


























    Your Answer








    StackExchange.ready(function() {
    var channelOptions = {
    tags: "".split(" "),
    id: "106"
    };
    initTagRenderer("".split(" "), "".split(" "), channelOptions);

    StackExchange.using("externalEditor", function() {
    // Have to fire editor after snippets, if snippets enabled
    if (StackExchange.settings.snippets.snippetsEnabled) {
    StackExchange.using("snippets", function() {
    createEditor();
    });
    }
    else {
    createEditor();
    }
    });

    function createEditor() {
    StackExchange.prepareEditor({
    heartbeatType: 'answer',
    autoActivateHeartbeat: false,
    convertImagesToLinks: false,
    noModals: true,
    showLowRepImageUploadWarning: true,
    reputationToPostImages: null,
    bindNavPrevention: true,
    postfix: "",
    imageUploader: {
    brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
    contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
    allowUrls: true
    },
    onDemand: true,
    discardSelector: ".discard-answer"
    ,immediatelyShowMarkdownHelp:true
    });


    }
    });














    draft saved

    draft discarded


















    StackExchange.ready(
    function () {
    StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f513293%2fhow-do-operator-wheel-groups-work-on-freebsd%23new-answer', 'question_page');
    }
    );

    Post as a guest















    Required, but never shown

























    1 Answer
    1






    active

    oldest

    votes








    1 Answer
    1






    active

    oldest

    votes









    active

    oldest

    votes






    active

    oldest

    votes









    1














    The gpart(1) program doesn't write anything to /dev/ada1.



    It does all its operations by issuing GEOM_CTL ioctls on /dev/geom.ctl. In order to use ioctl(2) on a device file, you don't need write permissions to it; you only need to be able to open() it in read-only mode. And the operator group has read permissions on /dev/geom.ctl.






    share|improve this answer






























      1














      The gpart(1) program doesn't write anything to /dev/ada1.



      It does all its operations by issuing GEOM_CTL ioctls on /dev/geom.ctl. In order to use ioctl(2) on a device file, you don't need write permissions to it; you only need to be able to open() it in read-only mode. And the operator group has read permissions on /dev/geom.ctl.






      share|improve this answer




























        1












        1








        1







        The gpart(1) program doesn't write anything to /dev/ada1.



        It does all its operations by issuing GEOM_CTL ioctls on /dev/geom.ctl. In order to use ioctl(2) on a device file, you don't need write permissions to it; you only need to be able to open() it in read-only mode. And the operator group has read permissions on /dev/geom.ctl.






        share|improve this answer















        The gpart(1) program doesn't write anything to /dev/ada1.



        It does all its operations by issuing GEOM_CTL ioctls on /dev/geom.ctl. In order to use ioctl(2) on a device file, you don't need write permissions to it; you only need to be able to open() it in read-only mode. And the operator group has read permissions on /dev/geom.ctl.







        share|improve this answer














        share|improve this answer



        share|improve this answer








        edited 3 hours ago

























        answered 3 hours ago









        mosvymosvy

        10.3k11238




        10.3k11238






























            draft saved

            draft discarded




















































            Thanks for contributing an answer to Unix & Linux Stack Exchange!


            • Please be sure to answer the question. Provide details and share your research!

            But avoid



            • Asking for help, clarification, or responding to other answers.

            • Making statements based on opinion; back them up with references or personal experience.


            To learn more, see our tips on writing great answers.




            draft saved


            draft discarded














            StackExchange.ready(
            function () {
            StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f513293%2fhow-do-operator-wheel-groups-work-on-freebsd%23new-answer', 'question_page');
            }
            );

            Post as a guest















            Required, but never shown





















































            Required, but never shown














            Required, but never shown












            Required, but never shown







            Required, but never shown

































            Required, but never shown














            Required, but never shown












            Required, but never shown







            Required, but never shown







            Popular posts from this blog

            Taj Mahal Inhaltsverzeichnis Aufbau | Geschichte | 350-Jahr-Feier | Heutige Bedeutung | Siehe auch |...

            Baia Sprie Cuprins Etimologie | Istorie | Demografie | Politică și administrație | Arii naturale...

            Nicolae Petrescu-Găină Cuprins Biografie | Opera | In memoriam | Varia | Controverse, incertitudini...