[gentoo-desktop] Re: cdda2wav sound problem when ripping

[Duncan]

M. Edward Borasky posted <1098606984.29939.4.camel@6-allhosts>, excerpted
below,  on Sun, 24 Oct 2004 01:36:25 -0700:

> On Sat, 2004-10-23 at 21:36, Lindsay Haisley wrote:
>> I worked around my cdda2wav problem by using the paranoia lib
>> ("-paranoia" option to cdda2wav).  Apparently the problem is in the
>> cdda2wav's routines.
>>
>>
> My problems are more fundamental than that. "cdrecord" isn't functioning
> with 2.6.8 and 2.6.9 kernels. I just backed out "cdrecord-prodvd", since I
> don't have a DVD writer, and I've dropped back to a 2.4 kernel because
> "cdrecord" issues all sorts of warnings.

Well, more accurately, it's functional, but there were potential security
issues (like the ability of any non-root person or task to erase entire
disks, just by issuing the correct SCSI command!) with some of the SCSI
commands used in CD/DVD burning.   Over time, each command will have to be
gone over and added to a "safe" or "unsafe" list, and the kernel adjusted
accordingly.  However, for the time being, whole classes of necessary
functions were restricted to root-only (*NOT* available from SETUID apps
like cdrecord and friends often are).

Thus, one may choose to remain vulnerable to this and other security
problems, or one can choose to restrict burning to root for the time being.

That's the stock kernel, which I BTW run.  Some of the later Gentoo
kernels have been patched to return to earlier insecure functionality. 
However, I haven't tracked which ones since I use a kernel.org kernel
anyway, procuring it directly off of there, rather than using a Gentoo
kernel ebuild.

-- 
Duncan - List replies preferred.   No HTML msgs.
"They that can give up essential liberty to obtain a little
temporary safety, deserve neither liberty nor safety." --
Benjamin Franklin



--
gentoo-desktop@g.o mailing list