On Thu, 3 Apr 2003 04:22, David Fokkema wrote: > > Well, you are right, so I tried, :-). It works, so there is reason to be > glad. However, I'm still wondering how paranoid I must be to still want > cdrdao to run without setuid. Furthermore, without setuid and with group > permissions or something like that I should be able to control which users > may use the writer and which may not. So I will use this until I find > something better...
David, Here is the way Debian installs cdrecord -rws--x--- 1 root cdrom 177k Apr 9 2002 /usr/bin/cdrecord I am the only user on my system that belongs to the cdrom group, so I am the only non root user who can burn cds. You can set the same permissions for cdrdao, and the same owner and group. The easy way, check out the --reference option in man chmod. Then you have complete control over who can and who can not use cdrdao as well as cdreord. Bob -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

