Re: PATCH: cdrecord: avoiding scsi device numbering for ide devices

Frank Steiner
2004-08-20T07:46:28Z

Alan Cox wrote:
> On Iau, 2004-08-19 at 15:32, Frank Steiner wrote:
>
>>What a stupid claim. When I call cdrecord on SuSE 9.1, I can burn CDs and
>>DVDs as normal user, without root permissions, without suid, without ide-scsi,
>>using /dev/hdc as device.
>>
>>And this just works fine. So where's the problem?
>
>
> You can also erase the drive firmware as a user etc. That's the problem.

Hmm, but that's not a problem specific to the SuSE versions, is it?
Joerg was claiming that SuSE release "defective" versions that impact his
reputation. And I can't see that, because the versions shipped with at least
7.3, 9.0 and 9.1 just work fine (that's the versions I used).

The security thing and the problems with 2.6.8.1 keeping users from burning
(I have my set patched in now to allow users burning again, nor sure if
it is safe...) is a general issue as far as I understand, and nothing
SuSE specific.
Please correct me if I'm wrong!

cu,
Frank

--
Dipl.-Inform. Frank Steiner Web: http://www.bio.ifi.lmu.de/~steiner/
Lehrstuhl f. Bioinformatik Mail: http://www.bio.ifi.lmu.de/~steiner/m/
LMU, Amalienstr. 17 Phone: +49 89 2180-4049
80333 Muenchen, Germany Fax: +49 89 2180-99-4049