Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S268139AbUJDOQL (ORCPT ); Mon, 4 Oct 2004 10:16:11 -0400 Received: (majordomo@vger.kernel.org) by vger.kernel.org id S268157AbUJDOQL (ORCPT ); Mon, 4 Oct 2004 10:16:11 -0400 Received: from open.hands.com ([195.224.53.39]:60074 "EHLO open.hands.com") by vger.kernel.org with ESMTP id S268139AbUJDON4 (ORCPT ); Mon, 4 Oct 2004 10:13:56 -0400 Date: Mon, 4 Oct 2004 15:25:00 +0100 From: Luke Kenneth Casson Leighton To: Jens Axboe Cc: linux-kernel@vger.kernel.org Subject: Re: Bug#274860: Acknowledgement (kernel-image-2.6.8-1-686: CDROM_SEND_PACKET ioctls only work as root) Message-ID: <20041004142500.GE20930@lkcl.net> References: <20041004131014.GF19341@lkcl.net> <20041004135326.GA20930@lkcl.net> <20041004140145.GY2287@suse.de> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20041004140145.GY2287@suse.de> User-Agent: Mutt/1.5.5.1+cvs20040105i X-hands-com-MailScanner: Found to be clean X-hands-com-MailScanner-SpamScore: s X-MailScanner-From: lkcl@lkcl.net Sender: linux-kernel-owner@vger.kernel.org X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 882 Lines: 25 On Mon, Oct 04, 2004 at 04:01:46PM +0200, Jens Axboe wrote: > On Mon, Oct 04 2004, Luke Kenneth Casson Leighton wrote: > > found it. > > > > it's a new piece of kernel code verify_command in > > drivers/block/scsi_ioctl.c, which checks for the capability > > CAP_SYS_RAWIO. > > > > ah, dammit. > > > > for k3b to work, you'd have to install it setuid root, call > > getcap(), remove all but the necessary capabilities (i.e. don't > > remove CAP_SYS_RAWIO), do a setfsuid() and setfsgid() and do > > a setcap(). > > it works in 2.6.9-rcX. okay so someone has added the GET_CAPABILITY to verify_command in scsi_block.c there, yes? - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/