Patrick McFarland wrote:
>I was refering to the 2.6 permissions bug in cdrecord. It wouldn't work using
>a non-root user, even if they had the correct permissions. 2.6 changed (for
>the better, mind you), and Joerg refused to fix cdrecord. (I don't know if
>its even fixed now). Theres been other cases of cdrecord breaking on Linux
>only, but I can't think of them atm.
Well, it seems that you are uninformed about the facts :-(
So let me quote a mail I send to LKML on Aug 17 13:14:59 2004:
/*--------------------------------------------------------------------------*/
If Linux believes that there should be enhanced security similar to Solaris and
if Linux is a true open Source business, then I would expect that there is
cooperation. If I change things in e.g. mkisofs or cdrecord that could result
in problems for my "users", I send a notification mail to the XCDRoast & k3b
authors early enough.
If Linux plans to implement incompatible changes, I would expect that
"important users" are informed in advance so that it is possible to discuss the
problems an to have a planned smooth migration. As this did not happen, the
change needs to be called a bug. This is even more obvious if we take into
account that cdrtools curently is in code freeze state as a 2.01-final will
come the next days.
For this reason, I would recommend that Linux immediately goes back to the old
behavior and informs "important users". A change that has effects that are as
widely as this one should not be tried again within the next 3 months. Then
there is a change to have a smooth migration......
BTW: I try to inform my "important users" more than a year before I introduce
important changes.
/*--------------------------------------------------------------------------*/
Note that this was a few days before cdrtools-2.01 final have been published
(after nearly two years of planned work on a new version).
The changes to Linux did neither fix the problem (just check the mailings on
LKML from last year) nor has there been a need for introducing incompatible
changes. If the cause for the change really was the "security problem" caused
by the fact that Linux did allow to send SCSI commands on R/O file descriptors
it would have been sufficient to require R/W permissions on the fd. After
this putative small change, the supposed problem would have been fixed and
cdrtools as well as other users of the interface did work as before.
What the change on Linux did was not to fix a problem but to break cdrtools.
I am not unwilling to fix cdrecored, as a non broken program does not need
a fix. I was even willing to add a workaround for the incompatible interface
change. But this may obviously not happen in a code freeze state.
Sorry - The problems between cdrtools and Linux is only a result of the
missing will for cooperation from the Linux kernel crew.
BTW: Due to missing time (I like to see a good cooperation between my work
and the support code in an OS, so I am now actively working on OpenSolaris
and I am very busy...). My planned OpenSolaris based UNIX distribution
"SchilliX" should be available soon after the public availability of the
OpenSolaris source in Q2/2005 which is only a few days from now. Fortunately,
I believe that I will be able to boot my first "SchilliX from scratch"
compiled CD today.
P.S.: About 10 days ago, I made an attempt to include a workaround for the
interface changes in Linux, check cdrtools-2.01.01a03
Jörg
--
EMail:[email protected] (home) Jörg Schilling D-13353 Berlin
[email protected] (uni)
[email protected] (work) Blog: http://schily.blogspot.com/
URL: http://cdrecord.berlios.de/old/private/ ftp://ftp.berlios.de/pub/schily
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to [email protected]
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/
[Index of Archives]
[Kernel Newbies]
[Netfilter]
[Bugtraq]
[Photo]
[Stuff]
[Gimp]
[Yosemite News]
[MIPS Linux]
[ARM Linux]
[Linux Security]
[Linux RAID]
[Video 4 Linux]
[Linux for the blind]
[Linux Resources]