[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: CD burning without root priviligdes



On Wednesday 13 November 2002 17:51, Hendrik Sattler wrote:
> Yes, an "addgroup <user> cdrom" is enough to make it work. But you do
> not really want that to users,you cannot trust ultimately, because
> suid-root in this case allows it to specify anything as dev= in
> cdrecord command line: overwriting any scsi device is nice for
> harmful things...

Oops! I didn't consider that. A solution (requiring changes to cdrecord) 
would be to make some settings in /etc/default/cdrecord mandatory 
without the ability to override them on the command line.

Michael

-- 
Michael Schuerig                  If at first you don't succeed...
mailto:schuerig@acm.org           try, try again.
http://www.schuerig.de/michael/   --Jerome Morrow, "Gattaca"



Reply to: