Re: cdrdao / ide-scsi problem

2003-04-04 Thread Paul Johnson
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Thu, Apr 03, 2003 at 08:35:02AM -0600, Nathan E Norman wrote: Shoot the maintainer of xcdroast an email asking him about the issue, or open a wishlist bug. Submitted wishlist bug against xcdroast. - -- .''`. Baloo Ursidae [EMAIL

Re: cdrdao / ide-scsi problem

2003-04-04 Thread Paul Johnson
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Fri, Apr 04, 2003 at 04:42:17AM +1000, bob parker wrote: Using a setuid root program (sudo) to avoid having cdrecord or cdrdao set up as setuid root just does not any sense to me at all. Well, sudo can be used as a means of authentication to

Re: cdrdao / ide-scsi problem

2003-04-04 Thread bob parker
On Fri, 4 Apr 2003 20:20, Paul Johnson wrote: On Fri, Apr 04, 2003 at 04:42:17AM +1000, bob parker wrote: Using a setuid root program (sudo) to avoid having cdrecord or cdrdao set up as setuid root just does not any sense to me at all. Well, sudo can be used as a means of authentication to

Re: cdrdao / ide-scsi problem

2003-04-04 Thread Paul Johnson
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Sat, Apr 05, 2003 at 04:20:42AM +1000, bob parker wrote: The point is that cdrdao requires root priveledge to run, period No, I meant I don't understand why someone would protect cdrao with sudo... - -- .''`. Baloo Ursidae [EMAIL

Re: cdrdao / ide-scsi problem

2003-04-03 Thread Qian Gong
On Wed, Apr 02, 2003 at 08:41:29PM +0200, David Fokkema wrote: Well, you are right, so I tried, :-). It works, so there is reason to be glad. However, I'm still wondering how paranoid I must be to still want cdrdao to run without setuid. Furthermore, without setuid and with group permissions

Re: cdrdao / ide-scsi problem

2003-04-03 Thread David Fokkema
Well, you are right, so I tried, :-). It works, so there is reason to be glad. However, I'm still wondering how paranoid I must be to still want cdrdao to run without setuid. Furthermore, without setuid and with group permissions or something like that I should be able to control which

Re: cdrdao / ide-scsi problem

2003-04-03 Thread David Fokkema
Here is the way Debian installs cdrecord -rws--x---1 root cdrom177k Apr 9 2002 /usr/bin/cdrecord The package I see in unstable installs as -rwsr-xr-- if you're running setuid, which is much more sensible (there's a comment in the Debian policy manual noting that there's

Re: cdrdao / ide-scsi problem

2003-04-03 Thread Colin Watson
On Wed, Apr 02, 2003 at 11:24:36PM -0800, Paul Johnson wrote: On Thu, Apr 03, 2003 at 03:32:43AM +1000, bob parker wrote: I'm no expert really, and maybe there is some other permissions problem going on, but I observe that with a default Debian Woody install that cdrecord is setuid. Afaik

Re: cdrdao / ide-scsi problem

2003-04-03 Thread Paul Johnson
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Thu, Apr 03, 2003 at 10:10:10AM +0100, Colin Watson wrote: cdrecord asks the following debconf question: OK, mybad. But xcdroast doesn't, and I never use cdrecord from the command line since xcdroast will do it all in one shot for me. - --

Re: cdrdao / ide-scsi problem

2003-04-03 Thread Qian Gong
On Thu, Apr 03, 2003 at 10:23:59AM +0200, David Fokkema wrote: Well, you are right, so I tried, :-). It works, so there is reason to be glad. However, I'm still wondering how paranoid I must be to still want cdrdao to run without setuid. Furthermore, without setuid and with group

Re: cdrdao / ide-scsi problem

2003-04-03 Thread David Fokkema
Sudo is a solution. Well, that way a user that can run cdrdao can run basically everything, can't he? No. By sudo you can limit the user to run a specific program, even with specific options. In that case sudo might be worth looking into and I will do just that, :-) David -- To

Re: cdrdao / ide-scsi problem

2003-04-03 Thread Russ Pitman
On Wed, Apr 02, 2003 at 11:24:36PM -0800, Paul Johnson wrote: On Thu, Apr 03, 2003 at 03:32:43AM +1000, bob parker wrote: I'm no expert really, and maybe there is some other permissions problem going on, but I observe that with a default Debian Woody install that cdrecord is setuid. Afaik

Re: cdrdao / ide-scsi problem

2003-04-03 Thread Nathan E Norman
On Thu, Apr 03, 2003 at 02:07:28AM -0800, Paul Johnson wrote: On Thu, Apr 03, 2003 at 10:10:10AM +0100, Colin Watson wrote: cdrecord asks the following debconf question: OK, mybad. But xcdroast doesn't, and I never use cdrecord from the command line since xcdroast will do it all in one

Re: cdrdao / ide-scsi problem

2003-04-03 Thread [EMAIL PROTECTED]
Nathan E Norman wrote: On Thu, Apr 03, 2003 at 02:07:28AM -0800, Paul Johnson wrote: On Thu, Apr 03, 2003 at 10:10:10AM +0100, Colin Watson wrote: cdrecord asks the following debconf question: OK, mybad. But xcdroast doesn't, and I never use cdrecord from the command line since xcdroast will do

Re: cdrdao / ide-scsi problem

2003-04-03 Thread bob parker
On Thu, 3 Apr 2003 20:59, Qian Gong wrote: Sudo is a solution. Well, that way a user that can run cdrdao can run basically everything, can't he? No. By sudo you can limit the user to run a specific program, even with specific options. sudo is a setuid program, it needs to be to do

Re: cdrdao / ide-scsi problem

2003-04-02 Thread bob parker
On Wed, 2 Apr 2003 16:56, David Fokkema wrote: I think you might need to setuid cdrdao hth Bob If there is any other way, I'd rather not do that, :-) I'm no expert really, and maybe there is some other permissions problem going on, but I observe that with a default Debian Woody

Re: cdrdao / ide-scsi problem

2003-04-02 Thread David Fokkema
I think you might need to setuid cdrdao hth Bob If there is any other way, I'd rather not do that, :-) I'm no expert really, and maybe there is some other permissions problem going on, but I observe that with a default Debian Woody install that cdrecord is setuid. Afaik that is

Re: cdrdao / ide-scsi problem

2003-04-02 Thread bob parker
On Thu, 3 Apr 2003 04:22, David Fokkema wrote: Well, you are right, so I tried, :-). It works, so there is reason to be glad. However, I'm still wondering how paranoid I must be to still want cdrdao to run without setuid. Furthermore, without setuid and with group permissions or something

Re: cdrdao / ide-scsi problem

2003-04-02 Thread David Fokkema
Well, you are right, so I tried, :-). It works, so there is reason to be glad. However, I'm still wondering how paranoid I must be to still want cdrdao to run without setuid. Furthermore, without setuid and with group permissions or something like that I should be able to control which

Re: cdrdao / ide-scsi problem

2003-04-02 Thread Colin Watson
On Thu, Apr 03, 2003 at 05:17:45AM +1000, bob parker wrote: On Thu, 3 Apr 2003 04:22, David Fokkema wrote: Well, you are right, so I tried, :-). It works, so there is reason to be glad. However, I'm still wondering how paranoid I must be to still want cdrdao to run without setuid.

Re: cdrdao / ide-scsi problem

2003-04-02 Thread Paul Johnson
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Thu, Apr 03, 2003 at 03:32:43AM +1000, bob parker wrote: I'm no expert really, and maybe there is some other permissions problem going on, but I observe that with a default Debian Woody install that cdrecord is setuid. Afaik that is because it

cdrdao / ide-scsi problem

2003-04-01 Thread David Fokkema
Hi, I recompiled cdrdao for stable and installed it on my server and I want to be able to use it as a regular user. Now, cdrdao scanbus should list all devices. As root, everything is ok, two IDE devices show up as normal, everything works fine. The problem is that I don't get it to work for a

Re: cdrdao / ide-scsi problem

2003-04-01 Thread bob parker
On Wed, 2 Apr 2003 03:07, David Fokkema wrote: Hi, I recompiled cdrdao for stable and installed it on my server and I want to be able to use it as a regular user. Now, cdrdao scanbus should list all devices. As root, everything is ok, two IDE devices show up as normal, everything works

Re: cdrdao / ide-scsi problem

2003-04-01 Thread David Fokkema
Hi, I recompiled cdrdao for stable and installed it on my server and I want to be able to use it as a regular user. Now, cdrdao scanbus should list all devices. As root, everything is ok, two IDE devices show up as normal, everything works fine. The problem is that I don't get it