Debian Edu ran into this problem too. We use LTSP, and because of this bug, all disk storage plugged into the LTSP server is available for all users logged in on thin clients. We want to enforce umask=007 or similar when mounting devices, to make sure all logged in users do not get access to other users devices.
We experience this problem on Etch, and would be very glad if this problem could be fixed for Etch. Our bug reference is <URL: http://bugs.skolelinux.no/show_bug.cgi?id=1165 >. At the moment, our backup plan is to patch hal to always add umask=007 when mounting devices, to avoid the problem. We already had to provide our own version of hal to fix an issue with how it passes events to users who are not logged in on the console, so this seemed the least of the available evils. But a proper fix where KDE would use the value in policy.mount_option would make it a lot easier for us to make sure the thin client users do not get access to files she should not have access to. This problem is most urgent for USB sticks with vfat file system, but affect all mounts. Happy hacking, -- Petter Reinholdtsen -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
