From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from [69.77.167.62] (helo=lists.gentoo.org) by finch.gentoo.org with esmtp (Exim 4.60) (envelope-from ) id 1KnWcB-0008SR-Sl for garchives@archives.gentoo.org; Wed, 08 Oct 2008 10:50:00 +0000 Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 2DA12E0746; Wed, 8 Oct 2008 10:49:56 +0000 (UTC) Received: from iron01.fraunhofer.de (iron01.fraunhofer.de [153.96.1.54]) by pigeon.gentoo.org (Postfix) with ESMTP id E45D1E0746 for ; Wed, 8 Oct 2008 10:49:55 +0000 (UTC) Received: from pluto.fokus.fraunhofer.de ([195.37.77.164]) by iron01.fraunhofer.de with ESMTP/TLS/DHE-RSA-AES256-SHA; 08 Oct 2008 12:49:54 +0200 Received: from EXCHSRV.fokus.fraunhofer.de (bohr [10.147.9.231]) by pluto.fokus.fraunhofer.de (8.13.7/8.13.7) with SMTP id m98Anr3G021047 for ; Wed, 8 Oct 2008 12:49:53 +0200 (MEST) Received: from rigel ([10.147.65.195]) by EXCHSRV.fokus.fraunhofer.de with Microsoft SMTPSVC(6.0.3790.3959); Wed, 8 Oct 2008 12:49:53 +0200 Date: Wed, 08 Oct 2008 12:49:52 +0200 From: Joerg.Schilling@fokus.fraunhofer.de (Joerg Schilling) To: gentoo-user@lists.gentoo.org Subject: Re: [gentoo-user] cdrecord - devname - was burning a dvd+r dl... Message-ID: <48ec9050.iTVa0uQf43hkRZ+F%Joerg.Schilling@fokus.fraunhofer.de> References: <48EB8304.7040004@konstantinhansen.de> <48eb8548.M8Ukbx5LjaWcIk2a%Joerg.Schilling@fokus.fraunhofer.de> <48EBCA98.2050006@konstantinhansen.de> <48EBCF12.9070603@gmail.com> <48ec7257.1BfxAMI7EMK1HEOU%Joerg.Schilling@fokus.fraunhofer.de> <48EC7A46.4050807@gmail.com> <48ec89e1.JjDGmngYioNT9J1Z%Joerg.Schilling@fokus.fraunhofer.de> <48EC8C55.1000604@gmail.com> In-Reply-To: <48EC8C55.1000604@gmail.com> User-Agent: nail 11.22 3/20/05 Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-user@lists.gentoo.org Reply-to: gentoo-user@lists.gentoo.org MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 X-OriginalArrivalTime: 08 Oct 2008 10:49:53.0281 (UTC) FILETIME=[9858FF10:01C92933] Content-Transfer-Encoding: quoted-printable X-Archives-Salt: de6f2170-32b5-4a8a-ad82-ef6caffb0e4b X-Archives-Hash: 7809699e6169cd2f6678f5f350053d5f Dale wrote: > > Then what is the point of having a cd/cdrw group? It doesn't seem to > have "secured" much of anything by having it. > > Dale aka confused. It's ok. It's normal for me. > Well, I did never propose to go this way. The group you are talkign about= =20 is an "invention" of some people who did not understand the background. As a result, some of them even tried to modify the cdrecord source code=20 and finally ended up with something that has more problems than the origi= nal=20 software. At cdrecord level, the effects are not as bad as they are at different pl= aces. The security bug in Linux in 2004 was "used" by some GUIs and the result = is that the authors included direct SCSI code into the GUI code. This resultet in= =20 non-portable code because no other OS allows to send SCSI commands withou= t=20 special privileges. Simple conclusion: just follow the documentation in the man pages ;-) Install cdrecord suid root on Linux. J=F6rg --=20 EMail:joerg@schily.isdn.cs.tu-berlin.de (home) J=F6rg Schilling D-13353 = Berlin js@cs.tu-berlin.de (uni) =20 schilling@fokus.fraunhofer.de (work) Blog: http://schily.blogs= pot.com/ URL: http://cdrecord.berlios.de/private/ ftp://ftp.berlios.de/pub/schil= y