Making Files Accessible From The Console; Enabling Console Access For Other Applications - Red Hat LINUX 7.2 - OFFICIAL LINUX CUSTOMIZATION GUIDE Manual

Section 17.6:Enabling Console Access for Other Applications
<console>=tty[0-9][0-9]* :[0-9]\.[0-9] :[0-9]
When users log in, they are attached to some sort of named terminal, either an X server with a name
like :0 or mymachine.example.com:1.0 or a device like /dev/ttyS0 or /dev/pts/2.
The default is to define that local virtual consoles and local X servers are considered local, but if you
want to consider the serial terminal next to you on port /dev/ttyS1 to also be local, you can change
that line to read:
<console>=tty[0-9][0-9]* :[0-9]\.[0-9] :[0-9] /dev/ttyS1

17.5 Making Files Accessible From the Console

In /etc/security/console.perms, there is a section with lines like:
<floppy>=/dev/fd[0-1]* \
/dev/floppy/*
<sound>=/dev/dsp* /dev/audio* /dev/midi* \
/dev/mixer* /dev/sequencer \
/dev/sound/*
<cdrom>=/dev/cdrom* /dev/cdwriter*
You can add your own lines to this section, if necessary. Make sure that any lines you add refer to the
appropriate device. For example, you could add the following line:
<scanner>=/dev/scanner
(Of course, make sure that /dev/sga is really your scanner and not, say, your hard drive.)
That's the first step. The second step is to define what is done with those files. Look in the last section
of /etc/security/console.perms for lines similar to:
<console> 0660 <floppy> 0660 root.floppy
<console> 0600 <sound>
<console> 0600 <cdrom>
and add a line like:
<console> 0600 <scanner> 0600 root
Then, when you log in at the console, you will be given ownership of the /dev/sga device and the
permissions will be 0600 (readable and writable by you only). When you log out, the device will be
owned by root and still have 0600 (now: readable and writable by root only) permissions.

17.6 Enabling Console Access for Other Applications

If you wish to make other applications accessible to console users, you will have to do just a little bit
more work.
0640 root
0600 root.disk
185