Re: cdrdao / ide-scsi problem

2003-04-04 Thread Paul Johnson
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Sat, Apr 05, 2003 at 04:20:42AM +1000, bob parker wrote: > The point is that cdrdao requires root priveledge to run, period No, I meant I don't understand why someone would protect cdrao with sudo... - -- .''`. Baloo Ursidae <[EMAIL PROTECTE

Re: cdrdao / ide-scsi problem

2003-04-04 Thread bob parker
On Fri, 4 Apr 2003 20:20, Paul Johnson wrote: > On Fri, Apr 04, 2003 at 04:42:17AM +1000, bob parker wrote: > > Using a setuid root program (sudo) to avoid having cdrecord or cdrdao set > > up as setuid root just does not any sense to me at all. > > Well, sudo can be used as a means of authenticati

Re: cdrdao / ide-scsi problem

2003-04-04 Thread Paul Johnson
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Fri, Apr 04, 2003 at 04:42:17AM +1000, bob parker wrote: > Using a setuid root program (sudo) to avoid having cdrecord or cdrdao set up > as setuid root just does not any sense to me at all. Well, sudo can be used as a means of authentication to l

Re: cdrdao / ide-scsi problem

2003-04-04 Thread Paul Johnson
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Thu, Apr 03, 2003 at 08:35:02AM -0600, Nathan E Norman wrote: > Shoot the maintainer of xcdroast an email asking him about the issue, > or open a wishlist bug. Submitted wishlist bug against xcdroast. - -- .''`. Baloo Ursidae <[EMAIL PROTECT

Re: cdrdao / ide-scsi problem

2003-04-03 Thread bob parker
On Thu, 3 Apr 2003 20:59, Qian Gong wrote: > > > > > > Sudo is a solution. > > > > Well, that way a user that can run cdrdao can run basically everything, > > can't he? > > No. By sudo you can limit the user to run a specific program, even with > specific options. sudo is a setuid program, it need

Re: cdrdao / ide-scsi problem

2003-04-03 Thread [EMAIL PROTECTED]
Nathan E Norman wrote: On Thu, Apr 03, 2003 at 02:07:28AM -0800, Paul Johnson wrote: On Thu, Apr 03, 2003 at 10:10:10AM +0100, Colin Watson wrote: cdrecord asks the following debconf question: OK, mybad. But xcdroast doesn't, and I never use cdrecord from the command line since xcdroast will do

Re: cdrdao / ide-scsi problem

2003-04-03 Thread Nathan E Norman
On Thu, Apr 03, 2003 at 02:07:28AM -0800, Paul Johnson wrote: > On Thu, Apr 03, 2003 at 10:10:10AM +0100, Colin Watson wrote: > > cdrecord asks the following debconf question: > > OK, mybad. But xcdroast doesn't, and I never use cdrecord from the > command line since xcdroast will do it all in on

Re: cdrdao / ide-scsi problem

2003-04-03 Thread Russ Pitman
On Wed, Apr 02, 2003 at 11:24:36PM -0800, Paul Johnson wrote: > On Thu, Apr 03, 2003 at 03:32:43AM +1000, bob parker wrote: > > I'm no expert really, and maybe there is some other permissions problem going > > on, but I observe that with a default Debian Woody install that cdrecord is > > setuid.

Re: cdrdao / ide-scsi problem

2003-04-03 Thread David Fokkema
> > > Sudo is a solution. > > > > Well, that way a user that can run cdrdao can run basically everything, > > can't he? > > > No. By sudo you can limit the user to run a specific program, even with > specific options. In that case sudo might be worth looking into and I will do just that, :-) Davi

Re: cdrdao / ide-scsi problem

2003-04-03 Thread Qian Gong
On Thu, Apr 03, 2003 at 10:23:59AM +0200, David Fokkema wrote: > > > Well, you are right, so I tried, :-). It works, so there is reason to be > > > glad. However, I'm still wondering how paranoid I must be to still want > > > cdrdao to run without setuid. Furthermore, without setuid and with group

Re: cdrdao / ide-scsi problem

2003-04-03 Thread Paul Johnson
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Thu, Apr 03, 2003 at 10:10:10AM +0100, Colin Watson wrote: > cdrecord asks the following debconf question: OK, mybad. But xcdroast doesn't, and I never use cdrecord from the command line since xcdroast will do it all in one shot for me. - -- .'

Re: cdrdao / ide-scsi problem

2003-04-03 Thread Colin Watson
On Wed, Apr 02, 2003 at 11:24:36PM -0800, Paul Johnson wrote: > On Thu, Apr 03, 2003 at 03:32:43AM +1000, bob parker wrote: > > I'm no expert really, and maybe there is some other permissions problem going > > on, but I observe that with a default Debian Woody install that cdrecord is > > setuid.

Re: cdrdao / ide-scsi problem

2003-04-03 Thread David Fokkema
> > Here is the way Debian installs cdrecord > > > > -rws--x---1 root cdrom177k Apr 9 2002 /usr/bin/cdrecord > > The package I see in unstable installs as -rwsr-xr-- if you're running > setuid, which is much more sensible (there's a comment in the Debian > policy manual noting tha

Re: cdrdao / ide-scsi problem

2003-04-03 Thread David Fokkema
> > Well, you are right, so I tried, :-). It works, so there is reason to be > > glad. However, I'm still wondering how paranoid I must be to still want > > cdrdao to run without setuid. Furthermore, without setuid and with group > > permissions or something like that I should be able to control wh

Re: cdrdao / ide-scsi problem

2003-04-03 Thread Qian Gong
On Wed, Apr 02, 2003 at 08:41:29PM +0200, David Fokkema wrote: > Well, you are right, so I tried, :-). It works, so there is reason to be > glad. However, I'm still wondering how paranoid I must be to still want > cdrdao to run without setuid. Furthermore, without setuid and with group > permission

Re: cdrdao / ide-scsi problem

2003-04-02 Thread Paul Johnson
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Thu, Apr 03, 2003 at 03:32:43AM +1000, bob parker wrote: > I'm no expert really, and maybe there is some other permissions problem going > on, but I observe that with a default Debian Woody install that cdrecord is > setuid. Afaik that is because

Re: cdrdao / ide-scsi problem

2003-04-02 Thread Colin Watson
On Thu, Apr 03, 2003 at 05:17:45AM +1000, bob parker wrote: > On Thu, 3 Apr 2003 04:22, David Fokkema wrote: > > Well, you are right, so I tried, :-). It works, so there is reason to be > > glad. However, I'm still wondering how paranoid I must be to still want > > cdrdao to run without setuid. Fur

Re: cdrdao / ide-scsi problem

2003-04-02 Thread David Fokkema
> > Well, you are right, so I tried, :-). It works, so there is reason to be > > glad. However, I'm still wondering how paranoid I must be to still want > > cdrdao to run without setuid. Furthermore, without setuid and with group > > permissions or something like that I should be able to control wh

Re: cdrdao / ide-scsi problem

2003-04-02 Thread bob parker
On Thu, 3 Apr 2003 04:22, David Fokkema wrote: > > Well, you are right, so I tried, :-). It works, so there is reason to be > glad. However, I'm still wondering how paranoid I must be to still want > cdrdao to run without setuid. Furthermore, without setuid and with group > permissions or somethin

Re: cdrdao / ide-scsi problem

2003-04-02 Thread David Fokkema
> > > I think you might need to setuid cdrdao > > > > > > hth > > > Bob > > > > If there is any other way, I'd rather not do that, :-) > > I'm no expert really, and maybe there is some other permissions problem going > on, but I observe that with a default Debian Woody install that cdrecord is > se

Re: cdrdao / ide-scsi problem

2003-04-02 Thread bob parker
On Wed, 2 Apr 2003 16:56, David Fokkema wrote: > > > > I think you might need to setuid cdrdao > > > > hth > > Bob > > If there is any other way, I'd rather not do that, :-) I'm no expert really, and maybe there is some other permissions problem going on, but I observe that with a default Debian

Re: cdrdao / ide-scsi problem

2003-04-01 Thread David Fokkema
> > Hi, > > > > I recompiled cdrdao for stable and installed it on my server and I want to > > be able to use it as a regular user. Now, > > > > cdrdao scanbus > > > > should list all devices. As root, everything is ok, two IDE devices show > > up as normal, everything works fine. The problem is th

Re: cdrdao / ide-scsi problem

2003-04-01 Thread bob parker
On Wed, 2 Apr 2003 03:07, David Fokkema wrote: > Hi, > > I recompiled cdrdao for stable and installed it on my server and I want to > be able to use it as a regular user. Now, > > cdrdao scanbus > > should list all devices. As root, everything is ok, two IDE devices show > up as normal, everything