cdrdao must have permissions like cdrecord --- ---
cdrecord тоже надо сделать restricted по=умолчанию
man control