Just a guess, but if you give other rw access to /dev/audio i'd guess the 
security problem comes from someone writing a small program that does, 
essentially this:

Label:
cat <au file> > /dev/audio
goto label

Try working in your office with an annoying au file playing on your speaker 
constantly..:)  I'd guess that is the security hole...however, i've never 
heard of a "server" having a sound card in it so I'm thinking this isn't 
much of a problem..:)
If it does become a problem, do this:

chmod g+rw /dev/audio

Then go into /etc/groups file and add a "sound" group.  Add the people to 
it you want to be able to access /dev/audio and make sure they are set to 
the sound group (or have the rights to the sound group).  After this is all 
done, you are set and ready to go.

(In other words, give group read-write access to /dev/audio then set only a 
few people into the group.  Make sure that only group has read-write access 
and not other)

Douglas Wagner

-----Original Message-----
From:   [EMAIL PROTECTED] [SMTP:[EMAIL PROTECTED]]
Sent:   Wednesday, December 23, 1998 3:48 PM
To:     Travis Bauer; [EMAIL PROTECTED]
Subject:        Re:RE: MP3 Static

You probably were running as root when it worked, and are now running as a 
user.
 Check the permissions of /dev/audio.  The simplest solution is to give 
"other"
rw access ("chmod +rw /dev/audio").  This isn't done out of the box due to
security concerns -- I'm not sure what the concern is offhand.  I figure it
isn't a terribly big concern for a desktop/laptop type machine.

gvb

____________________Reply Separator____________________
Subject:    RE: MP3 Static
Author: Travis Bauer <[EMAIL PROTECTED]>
Date:       12/23/98 4:26 PM

I recompiled my kernel using the crystal sound options, and it worked
wonderfully.  for one day.  I was playing mp3 files with x11amp and they
sounded great.  But when I went to use it the next day, it wouldn't work at
all.  x11amp said that it couldn't open the sound device.  I can't even cat
..au files to the /dev/audio.  So I don't know what I was doing right the 
day
before.  But I just installed the source code for the 2.1.?? kernel (the 
latest
one, I can't remember the last two numbers).  I've read that some things 
have
been changed in how sound is supported, so maybe this it will work this 
time.
Wish me luck.

TB



On Wed, 23 Dec 1998, you wrote:
|Heehe, that's my page.  As far as the 3K goes, i've not yet had the 
ability
|to get the CS card to work.  if I do find (or if someone out there gets 
me)
|the correct CS options for the 3K, i'll post them back up on nts.ml.org 
and
|have a good soundcard supported..:)
|
|Douglas Wagner
|
|-----Original Message-----
|From:  Travis Bauer [SMTP:[EMAIL PROTECTED]]
|Sent:  Sunday, December 20, 1998 11:02 PM
|To:    [EMAIL PROTECTED]
|Subject:       Re: MP3 Static
|
|Thanks, that sounds good.  The website I was looking at
|(nts.ml.org/inspiron)
|said that you should have 6859 UART, MIDI interface support, and FM
|Synthesizer
|support as well as the SB options.  Did you have these as well, or only 
the
|crystal sound option, along with /dev/dsp support?
|
|
|Thanks,
|TB
|
|On Mon, 21 Dec 1998, you wrote:
||Here's my advice--I don't know what the website said, but you need
||to use the Crystal Sound option.. CS4??? somethingorother in the kernel.
|
|---
|  http://nts.ml.org
|  FAQ: 
                              http://www.ps.uci.edu/~tomba/inspiron/
|                                     http://nts.ml.org/inspiron/
|  List Archives:
|                    http://nts.ml.org/inspiron/maillist.html
|  To unsubscribe send a message to:  [EMAIL PROTECTED]
|  List administrator:                [EMAIL PROTECTED]
|
|
|---
|  http://nts.ml.org
|  FAQ: 
                              http://www.ps.uci.edu/~tomba/inspiron/
|                                     http://nts.ml.org/inspiron/
|  List Archives:                     http://nts.ml.org/inspiron/maillis  
t.html
|  To unsubscribe send a message to:  [EMAIL PROTECTED]
|  List administrator:                [EMAIL PROTECTED]

---
  http://nts.ml.org
  FAQ:                               http://www.ps.uci.edu/~tomba/inspiron/
                                     http://nts.ml.org/inspiron/
  List Archives: 
                    http://nts.ml.org/inspiron/maillist.html
  To unsubscribe send a message to:  [EMAIL PROTECTED]
  List administrator:                [EMAIL PROTECTED]

Received: from esseye.si.com ([126.1.0.69]) by smtpgwy.si.com with SMTP
  (IMA Internet Exchange 3.01 Enterprise) id 0000F28A; Wed, 23 Dec 98 
16:32:02
-0500
Received: from checkers.si.com(really [126.1.8.254]) by esseye.si.com
    via sendmail with esmtp
    id <[EMAIL PROTECTED]>
    for <[EMAIL PROTECTED]>; Wed, 23 Dec 1998 16:33:09 -0500 (EST)
    (Smail-3.2.0.94 1997-Apr-22 #22 built 1998-Mar-13)
Received: from challenger.si.com (challenger.si.com) by checkers.si.com
 (Content Technologies SMTPRS 2.0.15) with SMTP id 
<[EMAIL PROTECTED]>
for <[EMAIL PROTECTED]>;
 Wed, 23 Dec 1998 16:31:59 -0500
Received: by challenger.si.com; id QAA09890; Wed, 23 Dec 1998 16:33:07 
-0500
(EST)
Received: from cx365504-a.elcjn1.sdca.home.com(24.4.78.34) by 
challenger.si.com
via smap (4.1)
    id xma009833; Wed, 23 Dec 98 16:32:19 -0500
Received: (qmail 7636 invoked by uid 504); 23 Dec 1998 21:31:21 -0000
Mailing-List: contact [EMAIL PROTECTED]; run by ezmlm
Reply-To: [EMAIL PROTECTED]
Delivered-To: mailing list [EMAIL PROTECTED]
Received: (qmail 7631 invoked from network); 23 Dec 1998 21:31:20 -0000
From: Travis Bauer <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Subject: RE: MP3 Static
Date: Wed, 23 Dec 1998 16:26:39 -0500
X-Mailer: KMail [version 0.7.9]
References: <[EMAIL PROTECTED]>
MIME-Version: 1.0
Message-Id: <98122316301000.00887@jc2>
X-KMail-Mark:
Content-Type: text/plain
Content-Transfer-Encoding: 8bit

---
  http://nts.ml.org
  FAQ:                               http://www.ps.uci.edu/~tomba/inspiron/
                                     http://nts.ml.org/inspiron/
  List Archives: 
                    http://nts.ml.org/inspiron/maillist.html
  To unsubscribe send a message to:  [EMAIL PROTECTED]
  List administrator:                [EMAIL PROTECTED]


---
  http://nts.ml.org                                  
  FAQ:                               http://www.ps.uci.edu/~tomba/inspiron/
                                     http://nts.ml.org/inspiron/
  List Archives:                     http://nts.ml.org/inspiron/maillist.html
  To unsubscribe send a message to:  [EMAIL PROTECTED]
  List administrator:                [EMAIL PROTECTED]

Reply via email to