Re: alternative to cdrecord?

2004-08-24 Thread John Summerfield
Brian Pack wrote:
With the old
kernel, a user could potentially wipe a drives firmware.
 

which actually happend with a release of Mandrake Linux and some brand I 
won't name coz I don't recall its name of CD-ROM.

The manufactorer misused one of the standard SCSI commands:-)

--
Cheers
John
-- spambait
[EMAIL PROTECTED]  [EMAIL PROTECTED]
Tourist pics http://portgeographe.environmentaldisasters.cds.merseine.nu/
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: alternative to cdrecord?

2004-08-24 Thread Wim De Smet
On Tue, 24 Aug 2004 15:31:31 +0800, John Summerfield
[EMAIL PROTECTED] wrote:
 Brian Pack wrote:
 
 With the old
 kernel, a user could potentially wipe a drives firmware.
 
 
 
 which actually happend with a release of Mandrake Linux and some brand I
 won't name coz I don't recall its name of CD-ROM.
 
 The manufactorer misused one of the standard SCSI commands:-)
 

It was LG. The model was an IDE cdrom drive that wasn't supposed to
implement the command in question. I think it was the flush command
which is apparently only used by cd-r(w) drives. The drive implemented
this as flush firmware.

pretty funny story if you think of it. :-)

greets,
Wim


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: alternative to cdrecord?

2004-08-24 Thread John Summerfield
Wim De Smet wrote:
It was LG. The model was an IDE cdrom drive that wasn't supposed to
implement the command in question. I think it was the flush command
which is apparently only used by cd-r(w) drives. The drive implemented
this as flush firmware.
pretty funny story if you think of it. :-)
 

Not if you had one:-)
Certain Billions have a similar problem. I think the command is system 
flush and it flushes the firmware.


--
Cheers
John
-- spambait
[EMAIL PROTECTED]  [EMAIL PROTECTED]
Tourist pics http://portgeographe.environmentaldisasters.cds.merseine.nu/
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



alternative to cdrecord?

2004-08-23 Thread Brian Pack
I've been hit with the issues between cdrecord and the 2.6.8 kernel.
I've tried running as root as some have suggested (off-list), but at
least for an audio cd, the results were less than satisfactory.
Actually, they were crap. A bunch of mechanical-sounding bloops where
King Crimson was expected.

For now, I've reverted to kernel 2.6.7, where my audio cds burn fine.

I could stay with 2.6.7. I could patch my kernel, but my confidence in
my kernel patching skills are low to nonexistent. I'm wondering if there
is an alternative to cdrecord that works with kernel 2.6.8 as it stands
right now.



signature.asc
Description: This is a digitally signed message part


Re: alternative to cdrecord?

2004-08-23 Thread Marc Wilson
On Mon, Aug 23, 2004 at 04:44:15PM -0400, Brian Pack wrote:
 I've been hit with the issues between cdrecord and the 2.6.8 kernel.

The issues... what issues?

-- 
 Marc Wilson | The Phone Booth Rule: A lone dime always gets the
 [EMAIL PROTECTED] | number nearly right.


signature.asc
Description: Digital signature


Re: alternative to cdrecord?

2004-08-23 Thread Brian Pack
On Mon, 2004-08-23 at 18:06, Marc Wilson wrote:
 On Mon, Aug 23, 2004 at 04:44:15PM -0400, Brian Pack wrote:
  I've been hit with the issues between cdrecord and the 2.6.8 kernel.
 
 The issues... what issues?

Haven't you heard? IIRC the kernel 2.6.8 plugged a security hole that
cdrecord used to function. Once the hole was closed, users could no
longer run cdrecord as they could in previous kernels. With the old
kernel, a user could potentially wipe a drives firmware.



signature.asc
Description: This is a digitally signed message part


Re: alternative to cdrecord?

2004-08-23 Thread Simon Kitching
On Tue, 2004-08-24 at 10:36, Brian Pack wrote:
 Haven't you heard? IIRC the kernel 2.6.8 plugged a security hole that
 cdrecord used to function. Once the hole was closed, users could no
 longer run cdrecord as they could in previous kernels. With the old
 kernel, a user could potentially wipe a drives firmware.
 

The emphasis is on the word users. There are some scsi commands that
can toast a drive; the kernel now has a blacklist of commands that
non-root users are forbidden from sending. Unfortunately, cdrecord uses
some of these commands, and hence cannot record when run as a non-root
user.

Root users can still send any scsi command they like to a drive.

Unfortunately one comment I saw indicates that making cdrecord suid
won't help, as cdrecord deliberately drops back to the real user id
before burning the cd, for security.  

I guess kernel hackers are working on a solution..

Subscribers to Linux Weekly News can find more info here now:
 http://lwn.net/Articles/97552/
Non-subscribers have to wait until thursday to access this article.

Cheers,

Simon


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: alternative to cdrecord?

2004-08-23 Thread csj
On 23. August 2004 at 3:06PM -0700,
Marc Wilson [EMAIL PROTECTED] wrote:

 On Mon, Aug 23, 2004 at 04:44:15PM -0400, Brian Pack wrote:

  I've been hit with the issues between cdrecord and the 2.6.8
  kernel.
 
 The issues... what issues?

Pretty well-known issues;-) 2.6.8.x breaks current versions of at
least two of the most popular optical media writing tools,
cdrecord and growisofs.

Search the cdwrite list ([EMAIL PROTECTED]) for details.
Watch out for the rants of the author of cdrecord.


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: alternative to cdrecord?

2004-08-23 Thread Michael D Schleif
* Brian Pack [EMAIL PROTECTED] [2004:08:23:16:44:15-0400] scribed:
 I've been hit with the issues between cdrecord and the 2.6.8 kernel.
snip /

Does this also affect cdrdao?

My boxen are at 2.6.3x, and I have considered upping them . . .

-- 
Best Regards,

mds
mds resource
877.596.8237
-
Dare to fix things before they break . . .
-
Our capacity for understanding is inversely proportional to how much
we think we know.  The more I know, the more I know I don't know . . .
--


signature.asc
Description: Digital signature


Re: alternative to cdrecord?

2004-08-23 Thread Andreas Janssen
Hello

Marc Wilson ([EMAIL PROTECTED]) wrote:

 On Mon, Aug 23, 2004 at 04:44:15PM -0400, Brian Pack wrote:
 I've been hit with the issues between cdrecord and the 2.6.8 kernel.
 
 The issues... what issues?

Kernel 2.8 has an improved security model that (for now) does not
allow normal users to write CDs anymore. Go to
http://groups.google.com and search for linux.kernel 2.6.8 cdrecord
to read more.

best regards
Andreas Janssen

-- 
Andreas Janssen [EMAIL PROTECTED]
PGP-Key-ID: 0xDC801674 ICQ #17079270
Registered Linux User #267976
http://www.andreas-janssen.de/debian-tipps.html


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: alternative to cdrecord?

2004-08-23 Thread Marc Wilson
On Tue, Aug 24, 2004 at 08:53:12AM +0800, csj wrote:
 Pretty well-known issues;-) 2.6.8.x breaks current versions of at
 least two of the most popular optical media writing tools,
 cdrecord and growisofs.

I knew there was a reason I stayed with the 2.6.5 kernel I was running. :)

-- 
 Marc Wilson | I'd never join any club that would have the likes
 [EMAIL PROTECTED] | of me as a member.  -- Groucho Marx


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]