Re: [gentoo-desktop] Re: cdda2wav sound problem when ripping

[Lindsay Haisley]

Thus spake Duncan on Sun, Oct 24, 2004 at 04:30:58AM CDT
> M. Edward Borasky posted <1098606984.29939.4.camel@6-allhosts>, excerpted
> below,  on Sun, 24 Oct 2004 01:36:25 -0700:
>
> > On Sat, 2004-10-23 at 21:36, Lindsay Haisley wrote:
> >> I worked around my cdda2wav problem by using the paranoia lib
> >> ("-paranoia" option to cdda2wav).  Apparently the problem is in the
> >> cdda2wav's routines.
> >>
> >>
> > My problems are more fundamental than that. "cdrecord" isn't functioning
> > with 2.6.8 and 2.6.9 kernels. I just backed out "cdrecord-prodvd", since I
> > don't have a DVD writer, and I've dropped back to a 2.4 kernel because
> > "cdrecord" issues all sorts of warnings.
>
> Well, more accurately, it's functional, but there were potential security
> issues (like the ability of any non-root person or task to erase entire
> disks, just by issuing the correct SCSI command!) with some of the SCSI
> commands used in CD/DVD burning.   Over time, each command will have to be
> gone over and added to a "safe" or "unsafe" list, and the kernel adjusted
> accordingly.  However, for the time being, whole classes of necessary
> functions were restricted to root-only (*NOT* available from SETUID apps
> like cdrecord and friends often are).
>
> Thus, one may choose to remain vulnerable to this and other security
> problems, or one can choose to restrict burning to root for the time being.

Since my desktop system is NATted to the world by a Linux firewall, and in a
SOHO office, I have my personal account in the wheel group, which is set in
sudoers as NOPASSWD: ALL, so I can run my CD burning stuff as root, no
problem.
 
> That's the stock kernel, which I BTW run.  Some of the later Gentoo
> kernels have been patched to return to earlier insecure functionality.
> However, I haven't tracked which ones since I use a kernel.org kernel
> anyway, procuring it directly off of there, rather than using a Gentoo
> kernel ebuild.

I posted my problem to the gentoo bug tracker, and there's been a bit of
traffic on it.  Seems there was an overhaul of SCSI in kernel 2.6.8 which
may have caused the problem.  I have 2.6.9, and when I get time (after Nov
3rd or 4th) I'll try it and see if the problem is solved.

-- 
Lindsay Haisley       | "Fighting against human |     PGP public key
FMP Computer Services |    creativity is like   |      available at
512-259-1190          |    trying to eradicate  | <http://pubkeys.fmp.com>
http://www.fmp.com    |        dandelions"      |
                      |      (Pamela Jones)     |

--
gentoo-desktop@g.o mailing list