From: Jens Axboe <axboe@suse.de>
To: Luke Kenneth Casson Leighton <lkcl@lkcl.net>
Cc: linux-kernel@vger.kernel.org
Subject: Re: Bug#274860: Acknowledgement (kernel-image-2.6.8-1-686: CDROM_SEND_PACKET ioctls only work as root)
Date: Mon, 4 Oct 2004 16:19:07 +0200 [thread overview]
Message-ID: <20041004141907.GZ2287@suse.de> (raw)
In-Reply-To: <20041004142500.GE20930@lkcl.net>
On Mon, Oct 04 2004, Luke Kenneth Casson Leighton wrote:
> On Mon, Oct 04, 2004 at 04:01:46PM +0200, Jens Axboe wrote:
> > On Mon, Oct 04 2004, Luke Kenneth Casson Leighton wrote:
> > > found it.
> > >
> > > it's a new piece of kernel code verify_command in
> > > drivers/block/scsi_ioctl.c, which checks for the capability
> > > CAP_SYS_RAWIO.
> > >
> > > ah, dammit.
> > >
> > > for k3b to work, you'd have to install it setuid root, call
> > > getcap(), remove all but the necessary capabilities (i.e. don't
> > > remove CAP_SYS_RAWIO), do a setfsuid() and setfsgid() and do
> > > a setcap().
> >
> > it works in 2.6.9-rcX.
>
> okay so someone has added the GET_CAPABILITY to verify_command in
> scsi_block.c there, yes?
GET_CONFIGURATION, yes. There have been a number of additions since
2.6.8.
--
Jens Axboe
prev parent reply other threads:[~2004-10-04 14:25 UTC|newest]
Thread overview: 5+ messages / expand[flat|nested] mbox.gz Atom feed top
[not found] <E1CES9w-0005Lh-6f@lkcl.net>
[not found] ` <handler.274860.B.10968930694757.ack@bugs.debian.org>
[not found] ` <20041004131014.GF19341@lkcl.net>
2004-10-04 13:53 ` Bug#274860: Acknowledgement (kernel-image-2.6.8-1-686: CDROM_SEND_PACKET ioctls only work as root) Luke Kenneth Casson Leighton
2004-10-04 14:01 ` Jens Axboe
2004-10-04 14:16 ` K.R. Foley
2004-10-04 14:25 ` Luke Kenneth Casson Leighton
2004-10-04 14:19 ` Jens Axboe [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20041004141907.GZ2287@suse.de \
--to=axboe@suse.de \
--cc=linux-kernel@vger.kernel.org \
--cc=lkcl@lkcl.net \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox