On Tuesday 28 July 2009 10:56:14 am Charles Philip Chan wrote:
Dog Walker
writes: It was set correctly to /dev/dvd which is a symbolic link to /dev/sr0
[...]
The dvd device, /dev/sr0, did not have read permission for others!
Remove the suid bit that you have set for mplayer. Put yourself in the disk group, relogin and try again.
Hi Charles, the "disk" group is one for all disk devices in the system, including hard disks. Adding user to disk group, user gives himself unlimited access to anything that is disk. When someone takes over user account trough, for instance browser vulnerability, it has all disks at will, and can do anything that root can do, bypassing all security measures that Linux is so proud to have in place. Also, any user error, sending something to hard disk, will result in a file system corruption. -- Regards, Rajko http://news.opensuse.org/category/people-of-opensuse/ -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org