Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 22 Aug 2001 20:07:12 +0200
From:      Joerg Wunsch <j@uriah.heep.sax.de>
To:        Oliver Lehmann <lehmann@ans-netz.de>
Cc:        cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org
Subject:   Re: [Fwd: Re: cvs commit: ports/sysutils/xcdroast Makefile pkg-plist ports/sysutils/xcdroast/files patch-Makefile]
Message-ID:  <20010822200712.A1838@uriah.heep.sax.de>
In-Reply-To: <20010822022317.5cb08144.lehmann@ans-netz.de>; from lehmann@ans-netz.de on Wed, Aug 22, 2001 at 02:23:17AM %2B0200
References:  <20010822022317.5cb08144.lehmann@ans-netz.de>

next in thread | previous in thread | raw e-mail | index | archive | help
As Oliver Lehmann wrote:

> It (better cdrecord, readcd and cdda2wav) needs read/write permission on
> 
> 
>   /dev/xpt*
> and
>   /dev/pass*

This is a design bug of cdrecord.  Its author insists on the opinion
that doing direct SCSI bus handling from a userland program is the
optimal way of implementing this kind of functionality.

So there won't be a fix for it.  The cdrecord manual claims that it
would be safe to be setuid root, but then, users have reported about
sig11 (buffer overflows), so who's going to trust that?

(The IMHO correct way would be to split off the device handling into a
device driver.  But since nobody is going to implement this, it won't
happen anytime soon.)

-- 
cheers, J"org               .-.-.   --... ...--   -.. .  DL8DTL

http://www.sax.de/~joerg/                        NIC: JW11-RIPE
Never trust an operating system you don't have sources for. ;-)

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe cvs-all" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20010822200712.A1838>