Joerg Schilling wrote:
Unfortunately "run everything as root" is not going to happen on many systems, some years ago capabilities were added to Linux, and those are the proper way to do access rather than bypassing all security checks. Also, the last time I looked the notes you provided only worked if security was disabled, selinux won't let you do what you were suggesting.Greg Wooledge <wooledg@eeg.ccf.org> wrote: That was some time ago, I did put "get current docs" on my todo list, probably won't happen until tomorrow. Caused by fixing a serious security issue... Once the first exploit was out it did have to be done quickly, and it did impact applications (not just yours). It came at a bad time in your code cycle, but making it sound as if the change was made just because they felt like it is simply not true. Allowing any SCSI command to go to devices was a hole allowing the bad guys to wipe out firmware on hard drives as well as burners, and had to be stopped immediately.ftp://ftp.berlios.de/pub/cdrecord/alpha/ http://cdrecord.berlios.de/old/private/problems.html Some old versions do not but this is caused by non-cooperative acting from the Linux Kernel maintainers: they did introduce a severe incompatible interface change after cdrtools had been put into a code freeze state for releasing. -- bill davidsen <davidsen@tmr.com> CTO TMR Associates, Inc Doing interesting things with small computers since 1979 |