SUID to cdrecord and cdrdao

Manuel Arostegui Ramirez manuel at
Tue May 22 11:20:28 UTC 2007

On Tuesday 22 May 2007 13:11:00 Adam Tkac wrote:
> Hi all,
> I did some quick think about SUID bits to /usr/bin/cdrecord (wodim) and
> /usr/bin/cdrdao . I'm using k3b for burning and it always write warnings
> like cdrecord will be run with root privileges. What do you think about
> it? Could it cause some security issues or something bad?
> Regards, Adam

As long as a bug is not discovered which affect cdrao or cdrecord and could 
allow a buffer overflow or similar,  there's no reason to worry about, IMHO. 
It's normal
Even AIX systems have SUID active for those tools.

All the best.
Manuel Arostegui Ramirez.

Electronic Mail is not secure, may not be read every day, and should not
be used for urgent or sensitive issues.

More information about the fedora-devel-list mailing list