https://bugzilla.novell.com/show_bug.cgi?id=764063 https://bugzilla.novell.com/show_bug.cgi?id=764063#c Marcus Meissner changed: What |Removed |Added ---------------------------------------------------------------------------- AssignedTo|bnc-team-screening@forge.pr |security-team@suse.de |ovo.novell.com | -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=764063 https://bugzilla.novell.com/show_bug.cgi?id=764063#c2 Jan Engelhardt changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEEDINFO |NEW InfoProvider|jengelh@inai.de | --- Comment #2 from Jan Engelhardt 2012-05-29 10:26:07 CEST --- cdemud(8): """ It receives SCSI commands from kernel module and processes them, passing the requested data back to the kernel. Daemon implements the actual virtual device; one instance per each device registered by kernel module. It uses libMirage, an image access library that is part of userspace-cdemu suite, for the image access (e.g. sector reading). The daemon registers itself on D-BUS' system or session bus (depending on the options passed to it) where it exposes an interface that can be used by clients to control it. """ 1. When run by root as a system daemon all users can load and unload images on that daemon instance. Naturally, this is discouraged by upstream. 2. For session mode - the default -, each unprivileged user can start a daemon instance, provided he has access to /dev/vhba_ctl to obtain a set of virtual drives which are specific to each instance. Tampering with other users' {daemon instances and virtual drives} is thus inhibited. Does not look like it uses polkit. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=764063 https://bugzilla.novell.com/show_bug.cgi?id=764063#c4 Ludwig Nussel changed: What |Removed |Added ---------------------------------------------------------------------------- Summary|cdemu-daemon: |AUDIT-0: cdemu-daemon: |suse-dbus-unauthorized-serv |suse-dbus-unauthorized-serv |ice |ice --- Comment #4 from Ludwig Nussel 2012-05-29 10:38:47 CEST --- usr/lib/cdemu-daemon-system.sh 9 LOG_FILE=/tmp/cdemu-daemon.log o_O needs audit -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=764063 https://bugzilla.novell.com/show_bug.cgi?id=764063#c6 --- Comment #6 from Bernhard Wiedemann 2012-06-01 10:00:11 CEST --- This is an autogenerated message for OBS integration: This bug (764063) was mentioned in https://build.opensuse.org/request/show/123160 Factory / rpmlint -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=764063 https://bugzilla.novell.com/show_bug.cgi?id=764063#c8 --- Comment #8 from Bernhard Wiedemann 2012-06-04 15:00:07 CEST --- This is an autogenerated message for OBS integration: This bug (764063) was mentioned in https://build.opensuse.org/request/show/123483 Factory / cdemu-daemon -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=764063 https://bugzilla.novell.com/show_bug.cgi?id=764063#c10 Ludwig Nussel changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |REOPENED Resolution|FIXED | --- Comment #10 from Ludwig Nussel 2012-06-05 09:50:22 CEST --- There's still a systemd service file and a system wide dbus access file so as long as there is a way to run this system wide it needs to be looked at. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.