On Wednesday 13 November 2002 17:51, Hendrik Sattler wrote:
> Yes, an "addgroup <user> cdrom" is enough to make it work. But you do
> not really want that to users,you cannot trust ultimately, because
> suid-root in this case allows it to specify anything as dev= in
> cdrecord command line: overwriting any scsi device is nice for
> harmful things...

Oops! I didn't consider that. A solution (requiring changes to cdrecord) 
would be to make some settings in /etc/default/cdrecord mandatory 
without the ability to override them on the command line.

Michael

-- 
Michael Schuerig                  If at first you don't succeed...
mailto:[EMAIL PROTECTED]           try, try again.
http://www.schuerig.de/michael/   --Jerome Morrow, "Gattaca"


Reply via email to