Well, it seems like it is console.perms in the case of hdc perms, though I dont know why if the definition is
<cdrom>=/dev/cdrom* /dev/cdroms/* /dev/cdwriter* /mnt/cdrom*
how does pam (or whoever does it) convert those into /dev/hdc ?
I haven't found the culprit of the change in permissions in /etc/fstab though
