Re: sshfs as non-root: fuse_mount: Permission d enied

[Maurice McCarthy]

On 2014-08-03 21:22, Carsten Kunze wrote:

I'll regroup. I don't have access to an OpenBSD system at the moment
but I'm trying to recall the readme and man page for ntfs-3g which 
also

uses fuse.

Using fuse which may lead to a privilege escalation, I think, ... 
and
that is why ntfs-3g has to be run as root and pass uid and gid 
options.

I'm guessing that sshfs will be similar.


Fabian suggested to set kern.usermount to a non-zero value, now it 
works

as expected.  Maybe this could help ntfs-3g also, I don't know.
(Setting uid/gid is not a nice solution.  But if it's necessary ...)

Cheers, Carsten


Ah, yes, I'd overlooked that. At least it is working for you now.

Good Luck, Moss

Re: sshfs as non-root: fuse_mount: Permission d enied

[Carsten Kunze]

> I'll regroup. I don't have access to an OpenBSD system at the moment 
> but I'm trying to recall the readme and man page for ntfs-3g which also 
> uses fuse.
> 
> Using fuse which may lead to a privilege escalation, I think, ... and 
> that is why ntfs-3g has to be run as root and pass uid and gid options. 
> I'm guessing that sshfs will be similar.

Fabian suggested to set kern.usermount to a non-zero value, now it works
as expected.  Maybe this could help ntfs-3g also, I don't know.
(Setting uid/gid is not a nice solution.  But if it's necessary ...)

Cheers, Carsten

Re: sshfs as non-root: fuse_mount: Permission d enied

[Maurice McCarthy]

I'll regroup. I don't have access to an OpenBSD system at the moment 
but I'm trying to recall the readme and man page for ntfs-3g which also 
uses fuse.


Using fuse which may lead to a privilege escalation, I think, ... and 
that is why ntfs-3g has to be run as root and pass uid and gid options. 
I'm guessing that sshfs will be similar.


Regards
Moss

Re: sshfs as non-root: fuse_mount: Permission d enied

[Carsten Kunze]

- Original Nachricht 
Von: Fabian Raetz 
An:  Carsten Kunze 
Datum:   03.08.2014 21:56
Betreff: Re: sshfs as non-root: fuse_mount: Permission d enied

> The sysctl "kern.usermount" must be set to some nozero value.
> You may want to take a look at mount(8).
> 
> Cheers,
> Fabian

That works, thank you!  (I did not see the relation of sshfs(1) and
mount(8).  That's why I had not looked in the mount manpage.)

--Carsten

Re: sshfs as non-root: fuse_mount: Permission d enied

[Carsten Kunze]

> I may be completely off the mark here but I believe that in OpenBSD all 
> mount points _must be owned by root. So you have to pass options for uid 
> and gid with the mount command.

I had expected that that works. But that is not really comfortable and kind of
faking and overriding the uid.

Ok, if that is required, then I need to do this.  But it should not be a 
security
issue to use sshfs on a directory owned by a user.  So I do not really
understand this requirement.

--Carsten