Subject: Re: Unprivileged access to devices
To: Thor Lancelot Simon <tls@rek.tjls.com>
From: Frederick Bruckman <fredb@immanent.net>
List: netbsd-users
Date: 01/02/2004 12:57:31
On Fri, 2 Jan 2004, Thor Lancelot Simon wrote:

> On Fri, Jan 02, 2004 at 08:45:04AM -0600, Frederick Bruckman wrote:
> >
> > It's very sensible, IMO, to make "/dev/rcd?[ad]" group writable. The
> > daily security script will warn about that, unfortunately, and the
>
> As well it should -- plenty of harm can be done by issuing raw SCSI
> commands using any device that will take them.

A CD-ROM drive isn't any SCSI device. The other choice, granting users
root just so they can rip audio tracks, isn't very attractive, and the
automounter can't help with that.

Frederick