Attila <[email protected]> wrote:

> At Freitag, 29. Januar 2010 11:39 Joerg Schilling wrote:
>
> Thanks for your nice informations and with this line for setcap
>
> cap_dac_override,cap_sys_rawio,cap_ipc_lock,cap_sys_nice,cap_net_bind_service+ep
>  
>
> a "cdrecord --scanbus" works as normal user without a problem.

BTW: cdrecord in this mode is unsafe as it does not manages the fine grained 
privileges but would need to give up cap_dac_override before it tries to open
other files. If you don't give up cap_dac_override, cdecord can read _any_ 
local file.

Jörg

-- 
 EMail:[email protected] (home) Jörg Schilling D-13353 Berlin
       [email protected]                (uni)  
       [email protected] (work) Blog: 
http://schily.blogspot.com/
 URL:  http://cdrecord.berlios.de/private/ ftp://ftp.berlios.de/pub/schily

Reply via email to