On 5 Apr 2001, Thierry Vignaud wrote:
> > > to enable some users and not some others to use it by specifying who
> > > is in this group.
> > > and to let these users having access to the required devices (/dev/sg*,
> > > /dev/scd*, /dev/pg*, and /dev/pcd* [the /dev/p* devices are for parallel
> > > writers])..
> > But why should not anyone be able to create an iso image? mkisofs doesn't
> > do anything remotely harmful (besides writing an awful lot of data - but if
> > the user has the space, why not?).
> this was needed in the old days in order to read old sessions in
> multi-sessions mode. it seems not anymore mandatory.
> If someone want to test multi-mode ...
If the user is a member of the group that has access to the relevant
devices, then won't they be able to access the devices anyway, without
needing mkisofs to be set-gid?
I may have missed something fundamental about unix permissions, but isn't
it pointless to have something set-gid that is only executable if you are
in the group anyway...?
Michael
