On Fri, Mar 11, 2005 at 08:49:02PM +0100, Joerg Anslik wrote:
>
> Yeah,
>
> >It is. Because pass allows you to do some pretty nasty stuff
> >with the SCSI bus. It shouldn't be a problem for you to change
> >it on demand :)
>
> Okay, but the same holds true for /dev/nsa* in a way, since I can see
> no big difference between "mt -f /dev/nsa0 erase" called by non-root,
> but operator-group life forms, and "nasty stuff" via /dev/pass0
> accessed by the same life forms.
There's one big difference though: pass applies to all SCSI devices
and allows almost unfiltered access, nsa not.
Joerg