Mailinglist Archive: opensuse-factory (949 mails)

[Joerg.Schilling@xxxxxxxxxxxxxxxxxxx (Joerg Schilling)]

Vladimir Nadvornik <nadvornik@xxxxxxx> wrote:

> On Wednesday 05 August 2009 23:17:57 Joerg Schilling wrote:
> > But it is interesting that bug 507337 is the most annoying problem with the
> > fork that I have been presented at the Sun day in easter 2007 in St.
> > Petersburg. A friend did show me the problem and we did fetch the original
> > software and he was immediately able to talk to his drive.
>
> This was probably bug http://bugzilla.novell.com/show_bug.cgi?id=510231 or 
> something similar. Wodim run by user is indeed unable to open a device with
> permissions root, root, 660.
>
> The fact that cdrecord with suid is able to use such device could be even 
> considered a security bug.

Cdrecord is carefully audited and you definitely _need_ root permissions if you 
like to offer the features that cdrecord offers. Linux did _always_ require root
privileges for such programs.

It is a lot more risky if you use software that has been influenced by people 
who fail to understand the background. Eduard Bloch is such a person....

And BTW: wodim has problems with dealing with e.g. SATA drives regardless on 
whether you are root.

Jörg

-- 
 EMail:joerg@xxxxxxxxxxxxxxxxxxxxxxxxxxx (home) Jörg Schilling D-13353 Berlin
       js@xxxxxxxxxxxxxxx                (uni)  
       joerg.schilling@xxxxxxxxxxxxxxxxxxx (work) Blog: 
http://schily.blogspot.com/
 URL:  http://cdrecord.berlios.de/private/ ftp://ftp.berlios.de/pub/schily
-- 
To unsubscribe, e-mail: opensuse-factory+unsubscribe@xxxxxxxxxxxx
For additional commands, e-mail: opensuse-factory+help@xxxxxxxxxxxx