It was <2014-03-17 pon 17:47>, when José Bollo wrote:
[...]
> page 6
> ======
>
> See above (page 3) for putting smack data to user's home directory.
>
> User specific data must be created within its home directory by
> applications and libraries.  The best place to use are
> $HOME/.config/... and $HOME/share/...
>
> By principle, daemon should not have specific user data. For the small
> account of daemons that should have user data (media manager,
> playlist, ...) we agree that it is the responsibility of the daemon to
> deal with user add and remove.
>
> For external memory cards, we are thinking that the use of links in
> the home directories is needed for applying quotas (see below page
> 7).

How would symbolic links help in enforcing quotas (see below)?

> Mounting memory cards would imply the creation/synchronisation of
> the links and of the data on the card. For example: on the card,
> should exists the directories:
>
>  - /home/user1...usern
>  - /opt/...
>
> and the main FS would have the links:
>
>  - /home/user1/sdcard -> /mount/sdcard/home/user1
>  - /opt/sdcard -> /mount/sdcard/opt
>
> That is our draft idea.

For the record. Today Udisks2 mounts removable media under
/run/media/<user>/<dir>

Where <user> is username (or uid?) of the user who requested to mount a
volume. <dir> is a label the filesystem or its UUID if label is
absent. By default udisks sets permission bits on dir to 700.  In this
configuration sharing data on a card between users isn't
straightforward. Please keep in mind that in general security on
removable media is a complicated matter since most (?) of them still use
FAT and if they don't they become somewhat less portable.


> page 7
> ======
>
> Limiting user storage can be made with a quota
> like mechanism that implies that any user data
> must be within its home directory.

It depends on filesystem layout. Quotas apply to a filesystem not a
subtree.

My 0,02 €.

Kind regards,
-- 
Łukasz Stelmach
Samsung R&D Institute Poland
Samsung Electronics

Attachment: pgp5SqDZSFKTv.pgp
Description: PGP signature

_______________________________________________
Dev mailing list
[email protected]
https://lists.tizen.org/listinfo/dev

Reply via email to