Re: [PATCH] add ACLs to /dev/sgX nodes for CD-ROM

["Nicolas Pomarède" <npomarede@corp.free.fr>]

Le 06/03/2011 16:33, Kay Sievers a écrit :
> On Sun, Mar 6, 2011 at 10:01, Andrey Borzenkov<arvidjaar@mail.ru>  wrote:
>> Current wine is using /dev/sgX to access CD-ROM devices. Since
>> distributions switched to using ACL instead of group membership
>> to control device access, wine is not able to access them.
>>
>> Add ACL to device nodes that already get GROUP="cdrom".
>
> sg is kind of deprecated and should really not be used anymore by
> anything. Ideally we would start no even loading the module.
>
> Who exactly depends on it and can not be fixed? Why does Fedora and
> SUSE does not seem to have any problem the last couple of years?
>
> Kay

Other distribs are also having problem with this :

gentoo : http://bugs.gentoo.org/321007

fedora 13 : http://bugs.winehq.org/show_bug.cgi?id#313

Wine's code is using /dev/sgX, I don't know if there're some patches 
around to change this.

It seems an usual fix is to add oneself to the cdrom group, but this is 
hardly an out of the box solution for a non technical user that would 
just install his linux distro of choice.

The fact that this problem is often related to users wanting to run 
protected games under Wine is certainly another reason why it didn't get 
much attention or fixes so far (in my case I want to access low level 
scsi functions with EAC).

Using acl in udev would provide a solution that automatically enables 
access to /dev/sgX for any logged user, without having to change /etc/group.

Nicolas