Subject: Re: Unprivileged access to devices
To: None <netbsd-users@NetBSD.org>
From: David S. <davids@idiom.com>
List: netbsd-users
Date: 01/02/2004 14:15:00
> > >
> > > It's very sensible, IMO, to make "/dev/rcd?[ad]" group writable. The
> > > daily security script will warn about that, unfortunately, and the
> >
> > As well it should -- plenty of harm can be done by issuing raw SCSI
> > commands using any device that will take them.
> 
> A CD-ROM drive isn't any SCSI device. The other choice, granting users
> root just so they can rip audio tracks, isn't very attractive, and the
> automounter can't help with that.

I guess that the "correct" way to do this is with 'sytrace' and privilege
elevation.  Though it's a bit of work to develop appropriate policies for
the various programs that will write to the CD/DVD devices,

David S.

> 
>