cdrom should not be executable.
Should only be readable. (after all, it's a read-only device).
Create a group ``cdrom'' perhaps, chown root.cdrom /dev/hdd, chmod 0440
/dev/hdd.
make programs like cdcd sgid cdrom (if you trust the program), or put
trusted users in group cdrom. The latter is preferred.
----- Original Message -----
From: "Steven Pauly"
To:
Sent: 03 February 2000, Thursday 23:12
Subject: [SLE] permissions on /dev/cdrom
| Greetings SuSeLand,
|
| I'm trying to run a program cdcd that is getting a permission denied error
| on /dev/cdrom. (Seems like cdcd ran fine on a previous SuSE release.)
|
| My ls -al /dev/cdrom shows:
| lrwxrwxrwx 1 root root 3 Dec 14 19:07 /dev/cdrom -> hdd
| and /dev/hdd shows:
| brw-rw---- 1 root disk 22, 64 Nov 8 13:48 /dev/hdd
|
| I did a chmod +rx /dev/hdd and things work. But is this the right way to
| do it? from a security standpoint?
|
| Environment:SuSE 6.3 2.2.14
|
| tia
| steve.
|
| Python kicks butt!
|
| Steven Pauly (281) 496-8041 (steve.pauly@glm.com)
| Global Marine Drilling Co. / Houston / Tx / 77079
| stevep@brokersys.com / stevep@bash.linux-shell.net
|
|
| --
| To unsubscribe send e-mail to suse-linux-e-unsubscribe@suse.com
| For additional commands send e-mail to suse-linux-e-help@suse.com
| Also check the FAQ at http://www.suse.com/Support/Doku/FAQ/
|
|
--
To unsubscribe send e-mail to suse-linux-e-unsubscribe@suse.com
For additional commands send e-mail to suse-linux-e-help@suse.com
Also check the FAQ at http://www.suse.com/Support/Doku/FAQ/