eject and pam support in Fedora

[Tomas Mraz]

On Tue, 2008-03-04 at 14:11 +0100, Zdenek Prikryl wrote:
> Miloslav Trmac napsal(a):
> > Hello,
> > Zdenek Prikryl napsal(a):
> >> I don't know, why eject has to use pam in Fedora. So, could anyone
> >> explain why?
> > The goal was probably to allow console users (=> pam_console.so) eject
> > the CD/DVD medium without knowing the root password.  Some platforms
> > have drives without a hardware eject button, so eject needs to be usable
> > by all users that can insert a medium.
> 
> If CD/DVD was mounted by root or other users, then probably another user
> shouldn't have permissions to unmount it and eject it, should he? (umounting
> stuff is in eject)

For CD/DVD anyone who has physical access to the machine can force it to
eject the media - either pushing the button or if it is locked using a
paperclip. But the problem with eject is that it doesn't distinguish
between CD/DVD and other HW such as harddrives.

-- 
Tomas Mraz
No matter how far down the wrong road you've gone, turn back.
                                              Turkish proverb