On Sun, Apr 23, 2006 at 12:45:28PM -0700, Mr O wrote:
> That's much more along the lines of what is needed.

I'm not so sure about that.  this will let the user mount the media,
but you still need to deal with write permissions of the media, AFAIK.
maybe if the user mounts on a directory they own, but it's still root
doing the mount, so I'm not sure exactly what happens in that case.

also, if you go the group-execute-only route, don't forget to make
sure root is part of that group ;)

-- 
<[EMAIL PROTECTED]>


> As I stated
> before, I'm avoiding fstab because I plug in multiple devices
> and the first USB is always /dev/sdb so I prefer manual control
> of the mount point. I have three USB keys, card reader, external
> hard drive, and phone that need to be interchangeable on the fly
> and/or cope with more than one being plugged in. Thus, fstab is
> more hassle in that case. What if /mnt/camera is usually
> /dev/sdb1 but I have a key in already mounted at /mnt/usbkey?
> /dev/sdc wouldn't autoconfigure to /mnt/camera via fstab. 
> 
> FWIW, this is Gentoo running Fluxbox. Ubuntu on the laptop
> handles things fine via all the automount crap. 
> 
> That be all,
> Mr O.
> 
> --- Jacob Meuser <[EMAIL PROTECTED]> wrote:
> 
> > On Sun, Apr 23, 2006 at 10:41:22AM -0700, Allen Brown wrote:
> > > Mr O wrote:
> > > >The trouble is root can do it all. I'm not looking to add
> > an
> > > >entry to fstab unless neccessary. I tend to mount different
> > > >devices to different directories. For instance, if only one
> > > >device is plugged in it is /dev/sdb. So I may mount it to
> > > >/mnt/camera or /mnt/usb. Now, what if I plug in a second
> > USB
> > > >device? Naturally it will be /dev/sdc so I'd mount it
> > somewhere.
> 
> > > Why are you avoiding /etc/fstab?  That seems to me like it
> > > would be the best solution.
> > > 
> > > The only alternative I can think of is sudo.  No wait, there
> > > is another.  You could suid /bin/mount to root.  I recommend
> > > against this since it would be a security hole.
> > 
> > could be tightened considerably by only allowing a certain
> > trusted
> > group (maybe operator?) permission to execute /bin/mount. 
> > this is
> > how shutdown(8) is set up on OpenBSD:
> > 
> > $ ls -l `which shutdown`
> > -r-sr-x---  1 root  operator  191824 Apr  3 15:45
> > /sbin/shutdown
> > $ 
> 
> 
> __________________________________________________
> Do You Yahoo!?
> Tired of spam?  Yahoo! Mail has the best spam protection around 
> http://mail.yahoo.com 
> _______________________________________________
> EUGLUG mailing list
> [email protected]
> http://www.euglug.org/mailman/listinfo/euglug
_______________________________________________
EUGLUG mailing list
[email protected]
http://www.euglug.org/mailman/listinfo/euglug

Reply via email to