Not exactly...
The issue is as follows:
I have a damaged drive from which I have partially recovered. It is still very fragile so I don't want to risk any sort of writing to it (and I am still hoping to be able to recover some of the other - as yet missing - partitions). Therefore I am only accessing the system via a live CD (Knoppix v.5.1.1).
One of the partitions that is readable is my /home partition. While I still can I want to get the data off it (without risking any form of writing). Unfortunately the actual FC6 OS partition is still corrupted so I can't chroot into that.
When I boot into the live CD and mount the /home partition it shows my users as being "locked" i.e. I do not have read permission.
If I try to launch K3B as the normal Knoppix user I cannot therefore read and copy the /home/users directories onto DVD.
If I launch K3B as root I can now read the /home directories but it forbids the use of growisofs as a security threat.
Here is the extract from the growisofs man page: (See
here for more details) :
Code:
If executed under sudo(8) growisofs refuses to start. This is done for the following reason. Naturally growisofs has to access the data set to be recorded to optical media, either indirectly by letting mkisofs generate ISO9660 layout on-the-fly or directly if a pre-mastered image is to be recorded. Being executed under sudo(8), growisofs effectively grants sudoers read access to any file in the file system. The situation is intensified by the fact that growisofs parses MKISOFS environment variable in order to determine alternative path to mkisofs executable image. This means that being executed under sudo(8), growisofs effectively grants sudoers right to execute program of their choice with elevated privileges. If you for any reason still find the above acceptable and are willing to take the consequences, then consider running following wrapper script under sudo(8) in place for real growisofs binary.
#!/bin/ksh
unset SUDO_COMMAND
export MKISOFS=/path/to/trusted/mkisofs
exec growisofs "$@"
I have tried creating that script but it just locks my system...
Any other ideas?
Thanks for helping...
Mark