Answering to myself again... After reading the manpage for pam_console I found out that pam_console uses fstab to map directories to devices... thus it maps /mnt/cdrom to /dev/hdc still I don't know who modified the perms for /etc/fstab and I have not been able to reproduce it... 