Red Hat Bugzilla – Bug 121194
Nautilus should have a suid wrapper for cd-record
Last modified: 2007-11-30 17:10:40 EST
From Bugzilla Helper:
User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.6) Gecko/20040312
Description of problem:
CDRecord is not suid root by default, hence some programs do not work
out of the box(such as Nautilus 2.6.0-4 Cd creator).
This may be this way for security reasons, but this might be a problem
for Joe Sixpack.
Version-Release number of selected component (if applicable):
Steps to Reproduce:
1. Run nautilus
2. Choose cd-creator
3. Try to make a cd
Actual Results: Nautilus will give one a error about not being able
to write to the CD
Expected Results: Nautilus should have burned the CD..
a workaround is to run chmod +s /usr/bin/cdrecord as root.
Not a good workaround. cdrecord would need wrapping carefully for such
things. Nautilus would I suspect need a small, non X using wrapper
that carefully fed the iso to the cd burner app and no interesting
other user provided arguments
We don't need setuid root. consolehelper should set the access rights
on the cd writer (/dev/cdwriter* as created by kudzu) so that the
console user can just use it. This used to work well. Did it break?
Closing per lack of response to previous request for information. Note that FC3
and FC4 are supported by Fedora Legacy for security fixes only. Please test
this on FC5 or FC6. If it still occurs there, please reopen and change the
version to fc5 or fc6. Otherwise, if this is a security issue, please reassign
the bug to Fedora Legacy. Thanks, and we apologize for not getting to this bug