RE: cgi scripts as root or similar - best method

2005-02-25 Thread Thomas Bätzler
Chris Devers <[EMAIL PROTECTED]> suggested: > Have you considered prefixing that command with `sudo`, and > going into the sudoers file to allow the www user that privilige? > > Of course, it would be a bit more complicated than that, as > sudo will prompt for a password that you have to pass ba

Re: cgi scripts as root or similar - best method

2005-02-25 Thread Gavin Henry
-- Just getting into the best language ever... Fancy a [EMAIL PROTECTED] Just ask!!! > Chris Devers wrote: >> On Fri, 25 Feb 2005, Gavin Henry wrote: >> >> >>>[...] the problem is [...] cdrecord needs to be run as root. >> >> >> I assume cdrecord is being invoked from a system command, right? >

Re: cgi scripts as root or similar - best method

2005-02-25 Thread Wiggins d'Anconia
Chris Devers wrote: On Fri, 25 Feb 2005, Gavin Henry wrote: [...] the problem is [...] cdrecord needs to be run as root. I assume cdrecord is being invoked from a system command, right? Have you considered prefixing that command with `sudo`, and going into the sudoers file to allow the www user

Re: cgi scripts as root or similar - best method

2005-02-25 Thread Gavin Henry
> On Fri, 25 Feb 2005, Gavin Henry wrote: > >> [...] the problem is [...] cdrecord needs to be run as root. > > I assume cdrecord is being invoked from a system command, right? I know have it running fine using -T and declaring ENN{PATH} as according to the "Security" section of the camel. Yeah,

Re: cgi scripts as root or similar - best method

2005-02-25 Thread Chris Devers
On Fri, 25 Feb 2005, Gavin Henry wrote: > [...] the problem is [...] cdrecord needs to be run as root. I assume cdrecord is being invoked from a system command, right? Have you considered prefixing that command with `sudo`, and going into the sudoers file to allow the www user that privilige?

Re: cgi scripts as root or similar - best method

2005-02-25 Thread Paul Archer
Are you sure that cdrecord needs to run as root? You might check into changin permissions on the device itself. Or if this is a trusted machine/environment (I assume it is, 'cause most people don't write web apps to burn CDs), then you could suid cdrecord itself as root. Be sure you understand