CD permissions

JB mesimpleton at yahoo.com
Thu Sep 18 18:28:00 EDT 2003


I changed my fstab setting from owner to users and ro
to rw but I still have to log into root to use the CD
burner. I am currently on a windows box and when I try
to download that cdrbq I get a 15k download. I am
using  xcdroast which seems to work fine except that I
have to log in as root to use it. I found this bit of
information in the HOWTO's about this subject.

How can this be set up so that a user can burn CDs
instead of always being root?
You can add the setuid-bit to the cdrecord-executable.
However, this might be a security risk. Just setting
the permissions on the device files does not help as
cdrecord issues privileged commands via the SCSI
generic interfaces.
which cdrecord
chown root.root /usr/bin/cdrecord
chmod 4111 /usr/bin/cdrecord

I wonder if I should change my fstab back or if this
chown, chmod is the next step?

JB <mesimpleton at yahoo.com> wrote:
> My fstab is different and I see you must have
> changed
> it to users. Is that all that needs to be done? Also
> my fstab has ro instead of rw. I would imagine that
> is
> read write? Here is what I have.
> /dev/cdrom  /mnt/cdrom  udf,iso9660
> noauto,owner,kudzu,ro 0 0
> /dev/fd0  /mnt/floppy  auto  noauto,owner,kudzu 0 0
> Looks like my floppy is root only too although I
> haven't actually tried it out to see for sure.
> If I just change owner to user and maybe ro to rw,
> that should do the trick. I also wonder why the
> howto
> info I got earlier is a completely different way
> than
> an fstab edit? Thanks.
> 
> --- Cyber Source <peter at thecybersource.com> wrote:
> > Here is a printout of my /etc/fstab, note the
> cdrom
> > line. After you fix
> > that you can download a file called cdrbq, it
> works
> > great. Here is a
> > link to it.
> >
>
http://sourceforge.net/project/showfiles.php?group_id=12071&release_id=176647
> > LABEL=/                 /                      
> ext3
> >    defaults       
> > 1 1
> > LABEL=/boot             /boot                  
> ext3
> >    defaults       
> > 1 2
> > none                    /dev/pts               
> > devpts  gid=5,mode=620 
> > 0 0
> > none                    /proc                  
> proc
> >    defaults       
> > 0 0
> > none                    /dev/shm               
> > tmpfs   defaults       
> > 0 0
> > /dev/sda3               swap                   
> swap
> >    defaults       
> > 0 0
> > /dev/cdrom              /mnt/cdrom             
> > iso9660
> > noauto,users,rw,kudzu,user,unhide 0 0
> > /dev/fd0                /mnt/floppy            
> auto
> >   
> > noauto,users,rw,kudzu 0
> > 0
> > /dev/hdb1               /mnt/windows           
> vfat
> >    user,rw,umask=0
> > 0 0
> > 
> > 
> > On Wed, 2003-09-17 at 22:57, JB wrote:
> > 
> > > Thanks for all the help with setting
> permissions.
> > I
> > > ended up goofing it all up, but that was my
> fault.
> > I
> > > did want to keep each user account separate and
> > just
> > > wanted the folder of pictures to be shared. I
> now
> > know
> > > that I need to make a generic user which others
> > can
> > > share resources, along with samba. I also know I
> > need
> > > to read up on chmod and chown commands. I read
> > some
> > > today and I almost understand the big picture
> > about
> > > groups, users, chown and chmod. I appreciate all
> > the
> > > help and I think I have enough information to
> get
> > the
> > > job done. I'll attempt it again in the near
> future
> > > after I digest some more reading in those areas.
> > > I also want to let all users have use of the CD
> > burner
> > > but I think that permission is set in fstab, if
> > I'm
> > > not mistaken? I remember reading it somewhere,
> but
> > for
> > > the life of me I haven't found that info yet. I
> > think
> > > it was in a howto, I just haven't dug very deep
> to
> > > find that info yet. I think it is defaulted to
> > only
> > > root access for some type of security reason? If
> > > someone wants to touch bases on that subject, it
> > would
> > > save me some hair pulling, hehehe.
> > > Thanks again,
> > > John
> > 
> > -- 
> > Cyber Source <peter at thecybersource.com>
> > 
> 




More information about the nflug mailing list