Callum Lerwick said:
> I don't get this. If xcdroast get root, shouldn't everything it calls be
> root too? Can you make xcdroast call cdrecord and such through sudo?

Many programs, when run with root privileges, hold on to them only as long as
they're needed and drop them the rest of the time.  For example, apache only
needs to be root when it's creating or destroying processes and operates as a
non-privileged user the rest of the time.  This way, if there's, e.g., a
buffer overrun in a URI parsing routine, anything that exploits that overrun
has to exploit it as a normal user, not as root.

-- 
"Two words: Windows survives." - Craig Mundie, Microsoft senior strategist
"So does syphillis. Good thing we have penicillin." - Matthew Alton
Geek Code 3.1:  GCS d- s+: a- C++ UL++$ P+>+++ L+++>++++ E- W--(++) N+ o+
!K w---$ O M- V? PS+ PE Y+ PGP t 5++ X+ R++ tv b+ DI++++ D G e* h+ r++ y+

---------------------------------------------------------------------
To unsubscribe, e-mail: tclug-list-unsubscribe at mn-linux.org
For additional commands, e-mail: tclug-list-help at mn-linux.org