Re: how do I permit ordinary users to mound SCSI devices ?

2005-01-07 Thread Lowell Gilbert
Kevin Smith [EMAIL PROTECTED] writes:

 Matthias Buelow wrote:
 
  Kevin Smith wrote:
 
  How do I permit ordinary users to mound SCSI devices ?
 
  As suggested in the FAQ, section 9, I am able to allow members of
  operator group mount the cdrom by setting sysctl -w vfs.usrmount=1
  This does not appear to work with SCSI devices.  (ex: /dev/da0s2)
  I get the error:
mount -t msdos /dev/da0s2 ~/ipod
  msdosfs: /dev/da0s2: Permission denied
 
 
  the last time I was bitten by that issue, the mount point had to be
  owned by the user (group write access apparently isn't enough).
  that's a bit of a problem with things like gui mounters and I hope
  that that behaviour will be changed sometime in the future.  at
  least I can't see any security problems with a user being able to
  mount over a mountpoint where he only has group write access.
 
 
 I thought that was the case, but I created a directory in the user's
 home directory (as that user) and used it as the mount point and it
 still does not permit it  (see example above: ~/ipod is owned by the
 user).  It works with the cdrom device though- i can mount that as a
 regular operator user.

Sounds like the users don't have permissions on /dev/da0s2 but do have
permissions on /dev/acd0.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


how do I permit ordinary users to mound SCSI devices ?

2005-01-06 Thread Kevin Smith
How do I permit ordinary users to mound SCSI devices ?
As suggested in the FAQ, section 9, I am able to allow members of 
operator group mount the cdrom by setting sysctl -w vfs.usrmount=1

This does not appear to work with SCSI devices.  (ex: /dev/da0s2)
I get the error:
 mount -t msdos /dev/da0s2 ~/ipod
msdosfs: /dev/da0s2: Permission denied
Any ideas ?
-Kevin
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: how do I permit ordinary users to mound SCSI devices ?

2005-01-06 Thread Matthias Buelow
Kevin Smith wrote:
How do I permit ordinary users to mound SCSI devices ?
As suggested in the FAQ, section 9, I am able to allow members of 
operator group mount the cdrom by setting sysctl -w vfs.usrmount=1
This does not appear to work with SCSI devices.  (ex: /dev/da0s2)
I get the error:
  mount -t msdos /dev/da0s2 ~/ipod
msdosfs: /dev/da0s2: Permission denied
the last time I was bitten by that issue, the mount point had to be 
owned by the user (group write access apparently isn't enough).  that's 
a bit of a problem with things like gui mounters and I hope that that 
behaviour will be changed sometime in the future.  at least I can't see 
any security problems with a user being able to mount over a mountpoint 
where he only has group write access.

mkb.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: how do I permit ordinary users to mound SCSI devices ?

2005-01-06 Thread Kevin Smith
Matthias Buelow wrote:
Kevin Smith wrote:
How do I permit ordinary users to mound SCSI devices ?
As suggested in the FAQ, section 9, I am able to allow members of 
operator group mount the cdrom by setting sysctl -w vfs.usrmount=1
This does not appear to work with SCSI devices.  (ex: /dev/da0s2)
I get the error:
  mount -t msdos /dev/da0s2 ~/ipod
msdosfs: /dev/da0s2: Permission denied

the last time I was bitten by that issue, the mount point had to be 
owned by the user (group write access apparently isn't enough).  
that's a bit of a problem with things like gui mounters and I hope 
that that behaviour will be changed sometime in the future.  at least 
I can't see any security problems with a user being able to mount over 
a mountpoint where he only has group write access.

I thought that was the case, but I created a directory in the user's 
home directory (as that user) and used it as the mount point and it 
still does not permit it  (see example above: ~/ipod is owned by the 
user).  It works with the cdrom device though- i can mount that as a 
regular operator user.

-K
mkb.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to 
[EMAIL PROTECTED]

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]