diff --git a/Makefile b/Makefile
index 1193544d..1c0ef3bc 100644
--- a/Makefile
+++ b/Makefile
@@ -2,7 +2,7 @@ RELEASE=2.0
 
 VERSION=2.0
 PACKAGE=qemu-server
-PKGREL=17
+PKGREL=18
 
 DESTDIR=
 PREFIX=/usr
diff --git a/PVE/API2/Qemu.pm b/PVE/API2/Qemu.pm
index 66fcd444..789b851a 100644
--- a/PVE/API2/Qemu.pm
+++ b/PVE/API2/Qemu.pm
@@ -46,6 +46,8 @@ my $check_storage_access = sub {
 
 	if (!$volid || $volid eq 'none') {
 	    # nothing to check
+	} elsif ($isCDROM && ($volid eq 'cdrom')) {
+	    $rpcenv->check($authuser, "/", ['Sys.Console']);
 	} elsif (!$isCDROM && ($volid =~ m/^(([^:\s]+):)?(\d+(\.\d+)?)$/)) {
 	    my ($storeid, $size) = ($2 || $default_storage, $3);
 	    die "no storage ID specified (and no default storage)\n" if !$storeid;
@@ -70,7 +72,7 @@ my $create_disks = sub {
 
 	my $volid = $disk->{file};
 
-	if (!$volid || $volid eq 'none') {
+	if (!$volid || $volid eq 'none' || $volid eq 'cdrom') {
 	    $res->{$ds} = $settings->{$ds};
 	} elsif ($volid =~ m/^(([^:\s]+):)?(\d+(\.\d+)?)$/) {
 	    my ($storeid, $size) = ($2 || $default_storage, $3);
diff --git a/changelog.Debian b/changelog.Debian
index 04df73e5..7d0fef03 100644
--- a/changelog.Debian
+++ b/changelog.Debian
@@ -1,3 +1,9 @@
+qemu-server (2.0-18) unstable; urgency=low
+
+  * fix cdrom (/dev/cdrom) permission check
+
+ -- Proxmox Support Team <support@proxmox.com>  Mon, 20 Feb 2012 07:16:36 +0100
+
 qemu-server (2.0-17) unstable; urgency=low
 
   * fix cdrom removal bug