Who sets /dev/snd/* owners/perms upon login?

[Juan Carlos Castro y Castro]

Tomasz Torcz escreveu:
> Dnia 10-03-2008, pon o godzinie 23:25 -0300, Juan Carlos Castro y Castro
> pisze:
>   
>> OK, now it got weird. I see the permissions in /dev/snd don't actually 
>> change - they're permanently at 0660, owner root:root - and yet I can 
>> play sound from a ssh session as a common user. But not from a VNC server.
>>     
>
> Permissions do not change. ACLs do. ACLs are in unix world since 1995 or longer. ACL are available in linux since about 2001. People should get used to them already.
>   

Ah, I see them now. I know what ACLs are, it's just that it's been so 
long since I saw any use of them that I forgot! But yet -- some mystery 
remains. When I log in as jcastro, I see someone (ConsoleKit?) does 
create the ACLs for jcastro. BUT, then I go to Ctrl-Alt-F1 and log on as 
gabi. User gabi then becomes able to play sound with aplay, but ONLY 
from that console; if I log in as gabi from ssh -- even while the same 
user is logged in from the console -- gabi at ssh can't play and gabi at 
console can!!! And there's no ACLs for gabi! Here's the listing:

[root at jcacer ~]# getfacl -Rs /dev/snd
getfacl: Removing leading '/' from absolute path names
# file: dev/snd/pcmC1D0c
# owner: root
# group: root
user::rw-
user:gdm:rw-
user:jcastro:rw-
group::rw-
mask::rw-
other::---

# file: dev/snd/controlC1
# owner: root
# group: root
user::rw-
user:gdm:rw-
user:jcastro:rw-
group::rw-
mask::rw-
other::---

# file: dev/snd/pcmC1D0p
# owner: root
# group: root
user::rw-
user:gdm:rw-
user:jcastro:rw-
group::rw-
mask::rw-
other::---

# file: dev/snd/controlC0
# owner: root
# group: root
user::rw-
user:gdm:rw-
user:jcastro:rw-
group::rw-
mask::rw-
other::---

# file: dev/snd/pcmC0D6c
# owner: root
# group: root
user::rw-
user:gdm:rw-
user:jcastro:rw-
group::rw-
mask::rw-
other::---

# file: dev/snd/pcmC0D0c
# owner: root
# group: root
user::rw-
user:gdm:rw-
user:jcastro:rw-
group::rw-
mask::rw-
other::---

# file: dev/snd/pcmC0D0p
# owner: root
# group: root
user::rw-
user:gdm:rw-
user:jcastro:rw-
group::rw-
mask::rw-
other::---

# file: dev/snd/hwC0D0
# owner: root
# group: root
user::rw-
user:gdm:rw-
user:jcastro:rw-
group::rw-
mask::rw-
other::---

# file: dev/snd/pcmC0D1p
# owner: root
# group: root
user::rw-
user:gdm:rw-
user:jcastro:rw-
group::rw-
mask::rw-
other::---

# file: dev/snd/hwC0D1
# owner: root
# group: root
user::rw-
user:gdm:rw-
user:jcastro:rw-
group::rw-
mask::rw-
other::---

# file: dev/snd/pcmC0D2c
# owner: root
# group: root
user::rw-
user:gdm:rw-
user:jcastro:rw-
group::rw-
mask::rw-
other::---

# file: dev/snd/pcmC0D6p
# owner: root
# group: root
user::rw-
user:gdm:rw-
user:jcastro:rw-
group::rw-
mask::rw-
other::---

# file: dev/snd/seq
# owner: root
# group: root
user::rw-
user:gdm:rw-
user:jcastro:rw-
group::rw-
mask::rw-
other::---

# file: dev/snd/timer
# owner: root
# group: root
user::rw-
user:gdm:rw-
user:jcastro:rw-
group::rw-
mask::rw-
other::---