Re: atapicam(4) as KLD?

On Fri, 15 Oct 2004 19:36, Peter Jeremy wrote:
> I tend to agree.  For some time, FreeBSD has been heading away from
> requiring users to re-compile the kernel.  If ATAPICAM can't be
> (readily) turned into a module, it would seem reasonable to have it
> built into GENERIC.
>
> Whilst we're discussing ATAPICAM, even after I make /dev/cd0[ac] mode
> 666, I can't write to it as a non-root user.  Does anyone know the
> rationale for this and which particular EPERM is the culprit?  I've
> had a quick look at the source but can't see nothing leapt out.

Burning to SCSI CD/DVD media isn't done like that.

cdrecord et al talk to the writer directly via xpt and pass, so if you want to 
allow non-root users to burn CD/DVDs you need to allow them access to pass 
and xpt (which is pretty bad from a security point of view..)

It sucks having to choose between features (growisofs, cdrecord, cdda2wav) and 
security (burncd) although I hear Soren has a version of the Schilly SCSI 
library that talks to IDE devices (but I doubt you can pick and choose..)

-- 
Daniel O'Connor software and network engineer
for Genesis Software - http://www.gsoft.com.au
"The nice thing about standards is that there
are so many of them to choose from."
  -- Andrew Tanenbaum
GPG Fingerprint - 5596 B766 97C0 0E94 4347 295E E593 DC20 7B3F CE8C