From: Luke Kenneth Casson Leighton <lkcl@lkcl.net>
To: Jens Axboe <axboe@suse.de>
Cc: linux-kernel@vger.kernel.org
Subject: Re: Bug#274860: Acknowledgement (kernel-image-2.6.8-1-686: CDROM_SEND_PACKET ioctls only work as root)
Date: Mon, 4 Oct 2004 15:25:00 +0100 [thread overview]
Message-ID: <20041004142500.GE20930@lkcl.net> (raw)
In-Reply-To: <20041004140145.GY2287@suse.de>
On Mon, Oct 04, 2004 at 04:01:46PM +0200, Jens Axboe wrote:
> On Mon, Oct 04 2004, Luke Kenneth Casson Leighton wrote:
> > found it.
> >
> > it's a new piece of kernel code verify_command in
> > drivers/block/scsi_ioctl.c, which checks for the capability
> > CAP_SYS_RAWIO.
> >
> > ah, dammit.
> >
> > for k3b to work, you'd have to install it setuid root, call
> > getcap(), remove all but the necessary capabilities (i.e. don't
> > remove CAP_SYS_RAWIO), do a setfsuid() and setfsgid() and do
> > a setcap().
>
> it works in 2.6.9-rcX.
okay so someone has added the GET_CAPABILITY to verify_command in
scsi_block.c there, yes?
next prev parent reply other threads:[~2004-10-04 14:16 UTC|newest]
Thread overview: 5+ messages / expand[flat|nested] mbox.gz Atom feed top
[not found] <E1CES9w-0005Lh-6f@lkcl.net>
[not found] ` <handler.274860.B.10968930694757.ack@bugs.debian.org>
[not found] ` <20041004131014.GF19341@lkcl.net>
2004-10-04 13:53 ` Bug#274860: Acknowledgement (kernel-image-2.6.8-1-686: CDROM_SEND_PACKET ioctls only work as root) Luke Kenneth Casson Leighton
2004-10-04 14:01 ` Jens Axboe
2004-10-04 14:16 ` K.R. Foley
2004-10-04 14:25 ` Luke Kenneth Casson Leighton [this message]
2004-10-04 14:19 ` Jens Axboe
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20041004142500.GE20930@lkcl.net \
--to=lkcl@lkcl.net \
--cc=axboe@suse.de \
--cc=linux-kernel@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox