yeah, i did have an input from jorg's find, it was relativly small, only a 
few lines, mostly password and Xserver stuff... i never knew they ran suid, 
you learn somethign every day.

i set the /dev/sg devices to be group owned by cdwriter simply because it is 
a scsi emulation.. its an atapi cdwriter so its not like someone will come 
along and add a scsi hard drive all of a sudden.

i would maybe consider running cdrtools suid and set it to be owned by 
cdwriter group so that only they can use it.... i am settign up a linux from 
scratch system, and everywhere i read, suid is dangerous, so i figured this 
as an alternative.

but about suid... if i run cdrtools suid, and a priveleged user runs 
mkisofs, and chooses to read directories they are not allowed to read... 
will it throw back an error? or save the iso image to a directory they dont 
have write priveledges in...to be honest i dont understand suid, i have been 
warned about it, so i stay away.

Sam, Ireland

_________________________________________________________________
Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to