securing recording

[josh_Borke]

Hi,

I'm trying to lock down my machine so that I know when someone burns a cd/dvd and possibly, what files they are burning. The only solution I have come up with so far is to:

change ownership of cdrecord to root
change ownership of mkisofs to root
use sudo to control access to those two programs.

This method will provide both logging and access control to burning. Does anyone have a better idea or know of some potential pitfalls? Thanks in advance.

-josh

[josh_Borke]

would another option be to remove the ide-scsi module? is the kernel still using scsi emulation for burning? Thanks

-josh