Yes, in this case, sgid is completely useless, since user already belongs
to cdwriter group. Disabling the sgid bit is a little safer, for
(hysterically) security conscious people.
On Thu, 5 Apr 2001, Michael Brown wrote:
> On 5 Apr 2001, Thierry Vignaud wrote:
> > this was needed in the old days in order to read old sessions in
> > multi-sessions mode. it seems not anymore mandatory.
> > If someone want to test multi-mode ...
>
> If the user is a member of the group that has access to the relevant
> devices, then won't they be able to access the devices anyway, without
> needing mkisofs to be set-gid?
>
> I may have missed something fundamental about unix permissions, but isn't
> it pointless to have something set-gid that is only executable if you are
> in the group anyway...?
