cdrecord privilege escalation

Privileges are not dropped on user specified program invocation...