Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S268142AbUJDOZd (ORCPT ); Mon, 4 Oct 2004 10:25:33 -0400 Received: (majordomo@vger.kernel.org) by vger.kernel.org id S268162AbUJDOXc (ORCPT ); Mon, 4 Oct 2004 10:23:32 -0400 Received: from ns.virtualhost.dk ([195.184.98.160]:22714 "EHLO virtualhost.dk") by vger.kernel.org with ESMTP id S268142AbUJDOV5 (ORCPT ); Mon, 4 Oct 2004 10:21:57 -0400 Date: Mon, 4 Oct 2004 16:19:07 +0200 From: Jens Axboe To: Luke Kenneth Casson Leighton Cc: linux-kernel@vger.kernel.org Subject: Re: Bug#274860: Acknowledgement (kernel-image-2.6.8-1-686: CDROM_SEND_PACKET ioctls only work as root) Message-ID: <20041004141907.GZ2287@suse.de> References: <20041004131014.GF19341@lkcl.net> <20041004135326.GA20930@lkcl.net> <20041004140145.GY2287@suse.de> <20041004142500.GE20930@lkcl.net> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20041004142500.GE20930@lkcl.net> Sender: linux-kernel-owner@vger.kernel.org X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 1069 Lines: 32 On Mon, Oct 04 2004, Luke Kenneth Casson Leighton wrote: > On Mon, Oct 04, 2004 at 04:01:46PM +0200, Jens Axboe wrote: > > On Mon, Oct 04 2004, Luke Kenneth Casson Leighton wrote: > > > found it. > > > > > > it's a new piece of kernel code verify_command in > > > drivers/block/scsi_ioctl.c, which checks for the capability > > > CAP_SYS_RAWIO. > > > > > > ah, dammit. > > > > > > for k3b to work, you'd have to install it setuid root, call > > > getcap(), remove all but the necessary capabilities (i.e. don't > > > remove CAP_SYS_RAWIO), do a setfsuid() and setfsgid() and do > > > a setcap(). > > > > it works in 2.6.9-rcX. > > okay so someone has added the GET_CAPABILITY to verify_command in > scsi_block.c there, yes? GET_CONFIGURATION, yes. There have been a number of additions since 2.6.8. -- Jens Axboe - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/