Re: [PATCH] add ACLs to /dev/sgX nodes for CD-ROM

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Mon, Mar 14, 2011 at 17:33, Harald Hoyer <harald@xxxxxxxxxx> wrote:
> Am 07.03.2011 16:23, schrieb Kay Sievers:
>> On Sun, Mar 6, 2011 at 10:01, Andrey Borzenkov <arvidjaar@xxxxxxx> wrote:
>>> Current wine is using /dev/sgX to access CD-ROM devices. Since
>>> distributions switched to using ACL instead of group membership
>>> to control device access, wine is not able to access them.
>>>
>>> Add ACL to device nodes that already get GROUP="cdrom".

> Oh! You don't want to do this... Won't this allow ordinary users to flash a new
> firmware, opening some security issues here?
> Wasn't this, why cdrecord needed to be suid back in those days?
> Wasn't this the reason for the filter for /dev/sr* in the kernel?

Do we really don't want that? Locally logged-in users could put glue
in the tray too. :)

Kay
--
To unsubscribe from this list: send the line "unsubscribe linux-hotplug" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html


[Index of Archives]     [Linux Kernel]     [Linux DVB]     [Asterisk Internet PBX]     [DCCP]     [Netdev]     [X.org]     [Util Linux NG]     [Fedora Women]     [ALSA Devel]     [Linux USB]

  Powered by Linux