lkml.org 
[lkml]   [2004]   [Aug]   [2]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
From
SubjectRe: ide-cd problems
Date
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Sunday 01 August 2004 11:57 am, Jens Axboe wrote:
> On Sun, Aug 01 2004, Alexander E. Patrakov wrote:
> > Zinx Verituse wrote:
> > >I don't believe command filtering is neccessary, since all of the
> > >ide-cd ioctls are still there (ioctls that allow playing, reading,
> > > etc) Only the SG_IO ioctl itself would have to be checked (i.e.,
> > > not each individual command available with SG_IO, just the
> > > overall ioctl itself, categorizing all of SG_IO more or less as
> > > raw IO. If this isn't doable with the current design, then the
> > > ide-cd interface should at least be very conspicuously documented
> > > as being extremely insecure as far as "read" access is concerned,
> > > as I know I wouldn't expect users to be able to overwrite my
> > > drive's firmware simply by granting the read access.
> >
> > Remember that it is still possible to write CDs through ide-cd in
> > 2.4.x using some pre-alpha code in cdrecord:
> >
> > cdrecord dev=ATAPI:1,1,0 image.iso
>
> (don't trim cc lists on linux-kernel!)
>
> Don't ever use that interface, period. It's not just the cdrecord
> code that may be alpha (I doubt it matters, it's easy to use), the
> interface it uses is not worth the lines of code it occupies.
Then we have a severe disagreement between the cdrecord code (or at
least the runtime warnings) and the Linux-Kernel IDE folks.
specifically, these lines, while running with cdrecord dev=/dev/cdrom

scsidev: '/dev/cdrom'
devname: '/dev/cdrom'
scsibus: -2 target: -2 lun: -2
Warning: Open by 'devname' is unintentional and not supported.

I've attached two logs, one using the ATAPI interface, one using your
suggested interface. Frankly, both have rather nasty warnings on them,
and one gets to wondering what the cdrecord authors want...

Maybe we should be cc:ing the authors of cdrecord as well?

- --
tabris
- -
Remember, Grasshopper, falling down 1000 stairs begins by tripping over
the first one.
-- Confusion
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)

iD8DBQFBDkVf1U5ZaPMbKQcRAukeAJ9y33IURJFheeJ39rtvJXHI6Ii5AwCgihup
Vo50HwMaGJe53L/zPFayGEY=
=udwi
-----END PGP SIGNATURE-----
\
 
 \ /
  Last update: 2005-03-22 14:04    [W:0.139 / U:0.296 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site