I shouldn't play cdrom, but I can play

stevesk · 07-27-2006, 08:31 PM

Hey people! I am logging as a normal user, called matrix. It hasn't any other system privilege, as you can see in /etc/group:

root::0:root
bin::1:root,bin,daemon
daemon::2:root,bin,daemon
sys::3:root,bin,adm
adm::4:root,adm,daemon
tty::5:
disk::6:root,adm
lp::7:lp
mem::8:
kmem::9:
wheel::10:root
floppy::11:root
mail::12:mail
news::13:news
uucp::14:uucp
man::15:
audio::17:
video::18:
cdrom::19:
games::20:
slocate::21:
utmp::22:
smmsp::25:smmsp
mysql::27:
rpc::32:
sshd::33:sshd
gdm::42:
shadow::43:
ftp::50:
pop::90op
scanner::93:
nobody::98:nobody
nogroup::99:
users::100:matrix
console::101:

Here is 'matrix' line in /etc/passwd:

matrix:x:1000:100:Matrix Systems,,,:/home/matrix:/bin/bash

And here is the permission of my cdrom drive (/dev/hdd):

brwxr-x--- 1 root cdrom 22, 64 2002-06-09 16:27 /dev/hdd

The problem is: Matrix is still able to listen to music CDs, when it shouldn't be, because I did chmod 750 in /dev/hdd and matrix is NOT on cdrom group. Why? Any help would be appreciated. I already tried to reboot, no results.

ProtoformX · 07-27-2006, 08:52 PM

You are using current, sometimes things get messed up, you can't really complain about it, because it's like Slackware 11.0 BETA
so, go back to Slackware 10.2 or wait for Pat to fix the problem.

stevesk · 07-27-2006, 09:02 PM

Was that a joke or are you serious, my friend?

gbonvehi · 07-27-2006, 09:18 PM

Don't forget the default groups you get assigned by /etc/login.defs: CONSOLE_GROUPS floppy:audio:video:cdrom

synapse · 07-28-2006, 12:41 AM

Hi

can you post your fstab file ?

evilDagmar · 07-28-2006, 03:07 AM

When you're logged in as matrix, run the `id` command. It will always tell you what your uid and group memberships are. They are probably not what you think they are. You do have write access to the optical drive or somethings been made suid that probably didn't need to be.

stevesk · 07-28-2006, 03:12 AM

Hey people! Problem solved! I had to edit my /etc/login.defs and change a line from:

CONSOLE_GROUPS floppy:audio:video:cdrom

To:

CONSOLE_GROUPS floppy:audio:video

I didn't know about it, but this line is a config for:

# List of groups to add to the user's supplementary group set
# when logging in on the console (as determined by the CONSOLE
# setting). Default is none.
#
# Use with caution - it is possible for users to gain permanent
# access to these groups, even when not logged in on the console.
# How to do it is left as an exercise for the reader...

Thanks to gbonvehi and everyone who helped me!

(exception: ProtoformX)