Re: Autofs: Need UID & VFS hook, security notice

[Richard Gooch]

H. Peter Anvin writes:
> Richard Gooch wrote:
> > Hm. I wonder if there are some situations where a floppy user might
> > not have console access? Say someone else is sitting in front of the
> > console, but isn't using the floppy. Is this a scenario which people
> > care about?
> > 
> > If so, I have a solution: use devfs+devfsd. Configure devfsd to
> > autoload the floppy driver upon lookup, and to change the ownerships
> > of the registered device entries to the user who did the lookup, and
> > make the permissions rw-------.
> > This has no race condition. It would also work nicely for mtools,
> > which don't mount the device.
> > 
> 
> Yes it does: I insert the floppy, you have a script running to poke
> at the floppy and BOOM!  You own my floppy.

Nope, run a little proggy:
    while (1)
    {
        stat ("/dev/floppy/0", &statbuf);
        if (i_dont_own_it (statbuf))
        {
            fprintf (stderr, "It's not yours: try again later\n");
            exit (1);
        }
        sleep (25);  /*  Less that the autounload time  */
    }

                                Regards,

                                        Richard....
Permanent: [EMAIL PROTECTED]
Current:   [EMAIL PROTECTED]