Answering to myself again...
After reading the manpage for pam_console I found out that pam_console uses fstab to map directories to devices... thus it maps /mnt/cdrom to /dev/hdc
still I don't know who modified the perms for /etc/fstab and I have not been able to reproduce it...
