Messages in this thread | | | From | tabris <> | Subject | Re: ide-cd problems | Date | Mon, 2 Aug 2004 09:45:02 -0400 |
| |
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
On Sunday 01 August 2004 11:57 am, Jens Axboe wrote: > On Sun, Aug 01 2004, Alexander E. Patrakov wrote: > > Zinx Verituse wrote: > > >I don't believe command filtering is neccessary, since all of the > > >ide-cd ioctls are still there (ioctls that allow playing, reading, > > > etc) Only the SG_IO ioctl itself would have to be checked (i.e., > > > not each individual command available with SG_IO, just the > > > overall ioctl itself, categorizing all of SG_IO more or less as > > > raw IO. If this isn't doable with the current design, then the > > > ide-cd interface should at least be very conspicuously documented > > > as being extremely insecure as far as "read" access is concerned, > > > as I know I wouldn't expect users to be able to overwrite my > > > drive's firmware simply by granting the read access. > > > > Remember that it is still possible to write CDs through ide-cd in > > 2.4.x using some pre-alpha code in cdrecord: > > > > cdrecord dev=ATAPI:1,1,0 image.iso > > (don't trim cc lists on linux-kernel!) > > Don't ever use that interface, period. It's not just the cdrecord > code that may be alpha (I doubt it matters, it's easy to use), the > interface it uses is not worth the lines of code it occupies. Then we have a severe disagreement between the cdrecord code (or at least the runtime warnings) and the Linux-Kernel IDE folks. specifically, these lines, while running with cdrecord dev=/dev/cdrom
scsidev: '/dev/cdrom' devname: '/dev/cdrom' scsibus: -2 target: -2 lun: -2 Warning: Open by 'devname' is unintentional and not supported.
I've attached two logs, one using the ATAPI interface, one using your suggested interface. Frankly, both have rather nasty warnings on them, and one gets to wondering what the cdrecord authors want...
Maybe we should be cc:ing the authors of cdrecord as well?
- -- tabris - - Remember, Grasshopper, falling down 1000 stairs begins by tripping over the first one. -- Confusion -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.4 (GNU/Linux)
iD8DBQFBDkVf1U5ZaPMbKQcRAukeAJ9y33IURJFheeJ39rtvJXHI6Ii5AwCgihup Vo50HwMaGJe53L/zPFayGEY= =udwi -----END PGP SIGNATURE-----
| |