non-root can't access dv device

[Scott James Remnant]

On Fri, 2006-03-17 at 19:48 +0100, Duncan Lithgow wrote:

> One problem (since breezy) is that only root can do any capture
> (export is borged too, but that's another story). Anyone else gets the
> error: "WARNING: raw1394 kernel module not loaded or failure to
> read/write /dev/raw1394!" I've checked /dev/raw1394 and the disk group
> has rw permissions, adding my normal account to the disk group doesn't
> help. 
> 
The error message is misleading, the fact the device exists means the
module has been loaded correctly by udev.  The real "error" is that the
permissions do not allow ordinary users to write to the device.

The problem is that the raw IEEE1394 device is literally just that; raw
access to the IEEE1394 stack!  This means that anyone with write access
to that device can access any device connected to the Firewire port, and
because of the nature of Firewire, they may execute arbitrary code on
the host system as root!

Scott
-- 
Scott James Remnant
scott at ubuntu.com
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 191 bytes
Desc: This is a digitally signed message part
Url : https://lists.ubuntu.com/archives/ubuntu-devel/attachments/20060318/fd373b24/attachment.pgp