On Monday 18 October 2004 23:04, Uwe Dippel wrote:
> Robert Parker wrote:
> > I think it's wong with 2.6.8. For security reasons it won't allow you to
> > run setuid root programs. The only way you can run cdrecord is as the
> > root user.
>
> You're abolutely right. I didn't think of limits of setuid.
>
> > AFAIK xcdroast is just a front end to cdrecord just like k3b.
>
> Sure, it is. But I prefered to use the app I'm simply more used to.
>
> > Maybe I'm wrong but I can't see how running a binary as root user is any
> > more secure than running it setuid root.
>
> Sure, more secure. But also quite braindead.
> By default it is more secure, because you cannot 'pass' permissions.

This link just turned up in another thread, you might want to check it out.
http://k3b.plainblack.com/index.pl/news2

Bob Parker

>
> Uwe


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to