"Christopher W. Curtis" wrote:
>
> The only problem with it is that the user must type 'mount' and 'umount'
> after inserting and before ejecting, which is not DOS-style.
>
> Since supermount isn't integrated and autofs has the ability to do
> mount/umount, if it could nab the UID and mount as not root, things
> would be even easier.
>
Using autofs is a way that would require it to nab UID would be a
security hole, since it would create an exploitable race condition. It
can in fact be argued that the "user" option to mount has the same
problem. I don't particularly advocate using autofs with floppies, but
if so, having a chown-to-follow-console setup and the "owner" option to
mount would be better.
-hpa
--
<[EMAIL PROTECTED]> at work, <[EMAIL PROTECTED]> in private!
"Unix gives you enough rope to shoot yourself in the foot."
http://www.zytor.com/~hpa/puzzle.txt
