[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: cd writing



On Fri, 2002-07-12 at 09:23, Stephen Gran wrote:
> steve@gashuffer:~$ ls -l /usr/bin/cdrecord
> -rwsr-xr-x    1 root     cdrom      181128 Jun 21 23:27
> /usr/bin/cdrecord
> 
> Note the sticky bit - IIRC, as root, chmod 4755 /usr/bin/cdrecord, and
> then chown root:cdrom(burner, whatever group makes you happy)
> /usr/bin/cdrecord, and then add your user to that group.

Two nitpicks; first, this is insecure if anyone else uses your system.
The proper mode (IMO) is 4750, and then add the users you want to burn
CDs to the cdrom group; only they'll be able to run the binary.

Secondly, that's not the sticky bit, it's the suid bit (which makes the
process run as the owner of the binary regardless of the real uid of the
person running it). The sticky bit either keeps executables in
memory/swap after they've exited (hence the name), but the more common
usage is on a directory, where it means that no one but the directory
owner can delete or move files in the directory even if they have write
permission. It's shown as +t in ls -l's output.
-- 
 - Joe Wreschnig <piman@sacredchao.net>  -  http://www.sacredchao.net
  "What I did was justified because I had a policy of my own... It's
   okay to be different, to not conform to society."
                                   -- Chen Kenichi, Iron Chef Chinese

Attachment: signature.asc
Description: This is a digitally signed message part


Reply to: