multimedia/k3b/PERMISSIONS.txt

0001 K3b needs some special permissions to work properly. Most distrobutions come with permissions that I don't like
0002 very much and make problems when adding new CD/DVD devices to your system.
0003 If you set up your system as follows you can be sure to never have K3b permission problems again.
0004
0005 1. Disable pam authentication for cdrom and burner devices in /etc/security/console.perm. Otherwise your permissions
0006    will be overwritten when loggin in and it's not possible for two users to use K3b at the same time.
0007    In my opinion one should disable this completely and create a proper configuration instead. The most annoying
0008    issue with this pam stuff is that you cannot have two sessions with two different users running because the first
0009    one owns all the sound and cd devices.
0010
0011 2. Create a cdrom or cdrw or whatever group (if it not already exists) and add all users that should be able to
0012    use K3b to that group. You may also skip this step and let everybody use K3b. In that case simply use root as
0013    the group and permissions 4711 and 666 instead of 4710 and 660 in the following steps.
0014
0015 3. Change the permissions of cdrecord and cdrdao to 4710 root.cdrom (substitute cdrom with the group from 2).
0016    This way both will run suid root which allows them to increase their scheduling priority resulting in a more
0017    stable burning process.
0018
0019 4. Change the permissions of all your cdrom device to 660 root.cdrom (substitute cdrom with the group from 2).
0020    With devfs you may do this with lines like this (the first changes all ide cd devices while the second takes
0021    care of the scsi cd devices):
0022      REGISTER        ^ide/host.*/bus.*/target.*/lun.*/cd          PERMISSIONS root.cdrom 660
0023      REGISTER        ^scsi/host.*/bus.*/target.*/lun.*/cd         PERMISSIONS root.cdrom 660
0024    In case you are not using devfs you may determine the devices by running K3b once as root and looking in the
0025    device settings. The corresponding devices are listed there.
0026
0027 5. Change the permissions of the generic SCSI devices to 660 root.cdrom (substitute cdrom with the group from 2).
0028    Both cdrecord and cdrdao use the generic devices to access the scsi drives. So you don't need to perform this step
0029    if you only have IDE devices.
0030    Use a line like the following for devfs:
0031      REGISTER        ^scsi/host.*/bus.*/target.*/lun.*/generic    PERMISSIONS root.cdrom 660
0032   In case you are not using devfs the devices are /dev/sg*.