Thge current kernel supports you not knowing who is using which console, furthermore there are environments where this is both used and the current console is *very* important information.

The fact you lack the knowledge of such environments or even the wit to figure them out doesn't mean they don't exist.

Then it needs to start 0600 - security starts by failing safe.

Wrong. That's the kind of sloppy attitude that causes bugs, poor code and security holes. It's the kind of arrogant "it only gets used like I say it does so screw the rest of you" attitude that the certain desktops are wrecked by.

So we *are* going to discuss the security, we are going to discuss the permissions and we are going to discuss the permissions management model you are trying to implement because when we've done that there is a good chance of finding a model that a) works b) is secure and c) solves your specific problem case.

Alan