OSS in jail

[Luís Fernando Schultz Xavier da Silveira]

> Pleas, reply to list instead of users.

Sorry.

> If a user has write access, how do you want to prevent him to set permissions?

This is the precise problem.
I need either a stronger form of access control than unix permissions
or two separate devices for playback and recording.
Or maybe a separate OSS stack, in the spirit of VIMAGE.
These options seem unrealistic, but the use case does not seem
unreasonable, which is why I pose the question.