jazip for DEBIAN
----------------

jaZip supports the Iomega Zip drive with parallel, SCSI or ATAPI (see
below) interfaces. I don't know about the Zip-plus version (someone please
tell me!). If you have an ATAPI drive, and you've compiled in IDE->SCSI
translation (also known as SCSI emulation or CONFIG_BLK_DEV_IDESCSI), then
jaZip works. The SCSI Jaz drive is supported in both the 1G and 2G
capacities. It does not support the much older IDE (non-ATAPI) interface
drives. It does not support Syquest drives.

 jazip is suid-root and sgid-floppy.  Once this package is installed, all
 users who are in group `floppy' will be able to mount and umount Zip and
 Jaz disks (Disks are mounted with the nosuid flag to increase security).
 See more about this below.

 I have created a configuration script called jazipconfig which is run
 non-interactively during package installation.  It should create a working
 /etc/jazip.conf file if the Zip or Jaz device is connected to the SCSI bus
 (or emulation SCSI) and if it is listed in /etc/fstab.  If not, please run
 jazipconfig again (in its default interactive mode) to create the
 /etc/jazip.conf file, which is required to run jazip.

 jazip comes bundled with some icons which can be used for customized
 window manager setups.  I have included those that looked useful for that
 purpose in /usr/X11R6/include/X11/pixmaps/ and have left the others in
 /usr/share/doc/jazip/icons/

 Known bug:  

  jazip will display an error message if there is no disk in the drive.
  However, the X interface does not appear, and this error message will
  therefore be lost if jazip is invoked from a window manager menu or
  button.  JaZip needs a flag such that this error message appears in an X
  pop-up window.

 Why is jazip suid-root? 

  jazip uses SCSI_IOCTL_SEND_COMMAND ioctl to send commands out to the
  SCSI host.  The kernel requires root privileges in order to do this 
  (see /usr/src/linux/drivers/scsi/scsi_ioctl.c).

  jaZip was designed with suid in mind.  Jarrod Smith has basically
  completely re-implemented the mount() command within jaZip.  The first
  thing jaZip does when it starts is read the hardware vendor string to
  make sure that the device it's operating on is an Iomega drive (so that
  someone couldn't try to use jaZip to mount some other device on the
  system without root).  

 How can I control users access to jazip?

  Then only members of group floppy can access the suid-root jazip
  binary.  To add user `joe' to the floppy group, do the following as root:

   # adduser joe floppy


Peter S Galbraith <psg@debian.org>, Fri, 13 Nov 1998 09:22:59 -0500
