Re: PATCH: cdrecord: avoiding scsi device numbering for ide devices

Joerg Schilling
2004-08-19T16:08:29Z

>From: Bartlomiej Zolnierkiewicz <B.Zolnierkiewicz@elka.pw.edu.pl>

>> As a security fix it was sufficiently important that it had to be done.

>IMO work-rounding this in kernel is a bad idea and could break a lot of
>existing apps (some you even don't know about). Much better way to deal with
>this is to create library for handling I/O commands submission and gradually
>teach user-space apps to use it.

This is exactly what libscg is for......
libscg already includes similar support for Solaris 9 & Solaris 10.

Cdrtools is is code freeze state. This is why I say the best idea is to remove
this interface change from the current Linux kernel and wait until there will
be new cdrtools alpha for 2.02 releases. These alpha could get support for uid
switching. If Linux then would again switch the changes on, it makes sense.

BTW: it makes absolutely no sense to have a list of "safe" commands in the kernel
as the kernel simply cannot know which SCSI commands are "safe" and which not.
The list would be if ever subject to changess on a dayly base which is a real
bad idea.

Note that having such a list of aparently safe commands would cause a lot of
untracable problems (why does it run for you but not for me....).

Jörg

--
EMail:joerg@schily.isdn.cs.tu-berlin.de (home) Jörg Schilling D-13353 Berlin
js@cs.tu-berlin.de (uni) If you don't have iso-8859-1
schilling@fokus.fraunhofer.de (work) chars I am J"org Schilling
URL: http://www.fokus.fraunhofer.de/usr/schilling ftp://ftp.berlios.de/pub/schily