I need to disable CD Write option in Ubuntu 13.04 desktop for users other than root.

salmanci · 01-10-2014, 01:38 AM

I need to disable CD Write option in Ubuntu 13.04 desktop for users other than root. Pls help.

allez · 01-10-2014, 01:54 AM

My drive device file has following access rights, owner and group:

Code:

$ ls -l /dev/sr0
brw-rw----+ 1 root cdrom 11, 0 янв  9 18:57 /dev/sr0

So if I need to deny CD/DVD burning for an ordinary user, I just delete that user from 'cdrom' group.

Darshan Parab · 01-10-2014, 02:05 AM

Quote:

Originally Posted by salmanci

I need to disable CD Write option in Ubuntu 13.04 desktop for users other than root. Pls help.

Since you don't want a user other than root to write to CD-drive, you can just disable Write permission for group and others.. Allow them to only read..

chmod go-w /dev/cdrom

You can mentioned whatever device it shows on your system

allez · 01-10-2014, 02:12 AM

Quote:

Originally Posted by Darshan Parab

... you can just disable Write permission for group and others.. Allow them to only read..

chmod go-w /dev/cdrom

You can mentioned whatever device it shows on your system

... and get ready to do this stuff every time after reboot.

Because device files will be created with default owner, group and access rights, and all changes you have made will be lost. Hence, if you need to manage user rights, you should do it at user level, not device one.

salmanci · 01-10-2014, 03:11 AM

Quote:

Originally Posted by allez

... and get ready to do this stuff every time after reboot.

Because device files will be created with default owner, group and access rights, and all changes you have made will be lost. Hence, if you need to manage user rights, you should do it at user level, not device one.

so you suggest the best way is to remove the user from "cdrom" group..?

allez · 01-10-2014, 06:47 AM

Yes, I do. I've done this much more than once, and every time it worked.

salmanci · 01-10-2014, 09:41 PM

Quote:

Originally Posted by allez

Yes, I do. I've done this much more than once, and every time it worked.

in that case are you sure user will get read permission if we remove from group cdrom..?

allez · 01-11-2014, 04:28 AM

No one can be completely sure in our world.

But you can try to exclude one of your users from 'cdrom' group and thus check if my method will work for you. If it won't, you may use method offered by Darshan Parab. In last case you will have to put the chmod command into one of your initialization scripts to avoid a "hand job" after every reboot.

jpollard · 01-12-2014, 08:35 PM

Or just alter the udev rule that makes it group writable.

salmanci · 01-12-2014, 10:02 PM

thanks alot for your suggestions.. will try each one and inform here..