On Wed, Apr 25, 2001 at 11:57:50PM +1000, Hamish Moffatt wrote: > On Wed, Apr 25, 2001 at 03:46:55AM -0500, Rahul Jain wrote: > > Why does xcdroast need to be setgid? I think it's terrible to have any user > > able to burn or screw up a burn... why can't they use sudo or su? > > Doesn't the user have to belong to the relevant group anyway? > We already control access to things like floppy drives, sound > cards etc through groups, so cd burning is another good example.
Isn't the xcdroast/cdrecord suid/sgid stuff about grabbing realtime scheduling priority? You can't control this via group ownership. Capabilities on the other hand might help... Regards, Daniel. -- GNU/Linux Audio Mechanics - http://www.glame.de Cutting Edge Office - http://www.c10a02.de GPG Key ID 89BF7E2B - http://www.keyserver.net