On Thu, 24 Jan 2002, Joerg Schilling wrote:

> I cannot change UNIX rules.....
> 
> If you like to create a socket connection with a port number < 1024 you 
> need to be root. If you like to understand what you need to do, just read
> the man page for cdrecord and for rscsi. Thay do list the actions to allow
> a suid root installation.

I don't see any UNIX rules which require your application to run on a 
restricted port. You have chosen to do so, but that's not a requirement. 
I think it's safe to say that many sites now have rules about programs 
which have root access (which is why INN has a tiny program easily read 
to open the port, give up root, and then start innd).

That's just a general comment, setting up a safe (chroot) environment is 
non-trivial, running ANY setuid root code is either unsafe or requires a 
level of trust in both the intent and execution of the code. If sendmail 
and ssh can be hacked to take advantage of root access, I think any such 
code should be considered for a "is there another way?" design review.

Please don't take that as a criticism of your code, it's a comment on 
"best practices" for safe computing.
 
> >Question:
> 
> >  Is it possible to change the speed of the CD on-the-fly without making=20
> >a coaster? I doubt it, it seems obvious to do that if the FIFO starts=20
> >getting low.
> 
> NO

Thanks, I didn't think so, but it's a nice thought when doing a burn on 
the fly.

-- 
   -bill davidsen ([EMAIL PROTECTED])
"The secret to procrastination is to put things off until the
 last possible moment - but no longer"  -me


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to