[vorbis] Renice ogg123

Beni Cherniavsky cben at techunix.technion.ac.il
Fri Aug 15 06:06:57 PDT 2003



Cameron Patrick wrote on 2003-08-15:

> | I haven't tried to figure this out for myself, but I think the sudo command
> | can do that.  It's a generic SUID thingy that lets you chose commands users
> | can run as root, so you could probably allow "nice -n -5 ogg123 *" and
> | nothing else.
>
> This sounds as though it'd have the problem of allowing a normal user to
> overwrite an arbitrary file (possibly including /dev/hda) with an WAV
> file produced by ogg123, and also to read any Ogg file owned by other
> users regardless of file permissions.
>
You could also only allow oggenc from stdin to stdout; the redirection
wil be performed by the user's shell so it'll be subject to his access
rights.


-- 
Beni Cherniavsky <cben at tx.technion.ac.il>
--- >8 ----
List archives:  http://www.xiph.org/archives/
Ogg project homepage: http://www.xiph.org/ogg/
To unsubscribe from this list, send a message to 'vorbis-request at xiph.org'
containing only the word 'unsubscribe' in the body.  No subject is needed.
Unsubscribe messages sent to the list will be ignored/filtered.




More information about the Vorbis mailing list