> The only other thing being in group operator lets you run, > apart from what you've added into /etc/devfs.{conf,rules} is > /sbin/mksnap_ffs .. In a default devfs config, it grants read permission to the disk devices (presumably to enable running dump(8)).