On Wed, Apr 25, 2001 at 11:57:50PM +1000, Hamish Moffatt wrote: > Doesn't the user have to belong to the relevant group anyway? > We already control access to things like floppy drives, sound > cards etc through groups, so cd burning is another good example.
-rwxr-sr-x 1 root cdrom 498300 Nov 23 04:37 /usr/bin/xcdrgtk* The user does not need to be in group cdrom to use it. This _gives_ any user access to the raw device. > Why not su/sudo? Well, that would let the user access files they > can't normally read. Eg burn other users' home directories on > to a CD. Also, X authority stuff is messy to transfer between > users. I don't see how sgid cdrom will help here. Just make it non-sgid, and if they're a member of group cdrom, they can burn a cd, period. X authority is easy, just su, don't su -. -- -> -/- - Rahul Jain - -\- <- -> -\- http://linux.rice.edu/~rahul -=- mailto:[EMAIL PROTECTED] -/- <- -> -/- "I never could get the hang of Thursdays." - HHGTTG by DNA -\- <- |--|--------|--------------|----|-------------|------|---------|-----|-| Version 11.423.999.220020101.23.50110101.042 (c)1996-2000, All rights reserved. Disclaimer available upon request.