Hi,

I'm trying to figure out why administrative privileges are required for both the automount program and to access the kernel autofs interface. Perhaps I've missed something but I can't see the security hole caused by allowing non-root users (with suitable directory permissions) to set-up their own automount points?

If it is not a security risk, then it would be useful if this restriction could be removed to allow fun hacks with things like FUSE. For example, I would like to set things up so if I move into /home/myhome/sshfs/[EMAIL PROTECTED]/, I automatically get connected via sshfs to 'foo' as user 'bar'. However this can only be done effectively if the automount process managing /home/me/sshfs is started by my user account. Otherwise there is no easy route to getting access to my ssh agent, allowing one-password-only logins (and even my X11 session so I can have a GUI to ask for the passwords etc...).

--
Jacob Bower <[EMAIL PROTECTED]>
Custom Computing Group  - http://cc.doc.ic.ac.uk/
Department of Computing - http://www.doc.ic.ac.uk/
Imperial College London - http://www.ic.ac.uk/

_______________________________________________
autofs mailing list
[email protected]
http://linux.kernel.org/mailman/listinfo/autofs

Reply via email to