[mdlug] Accessing dvd writer in k3b from a remote login

[R KANNAN]

I fail to see why allowing 'dd' to be used through a remote login
would be a security issue. 'ssh' after all is supposed to be secure
and the user is authenticated. I can write to other file systems
(provided I have the right permissions to that directories) as a
remote user why is cd/dvd writer any different.

On Tue, Oct 23, 2012 at 7:55 PM, Jonathan Billings <billings at negate.org> wrote:
> On Oct 23, 2012, at 5:11 PM, R KANNAN wrote:
>> I have a blank disk on the drive. But the problem is that K3b was
>> working fine with a writer device when logged in on the console. I am
>> having some display issues on this laptop which is why I had to login
>> from remote with 'ssh -X'.
>
> It's entirely likely that the console login (through PAM) sets up permissions and devices for the console user to be able to access the CD burner in KDE, and you lose that when logging in remotely.  I have no way of explaining why you're able to 'dd' to /dev/dvd through a remote connection, though, that seems like a security problem if it is the case.
>
> --
> Jonathan Billings <billings at negate.org>
>
>
> _______________________________________________
> mdlug mailing list
> mdlug at mdlug.org
> http://mdlug.org/mailman/listinfo/mdlug