On Mon, Mar 25, 2002 at 08:38:14AM +1100, Peter Hardy wrote:
> On Mon, 2002-03-25 at 08:24, David Fitch wrote:
> > On Mon, 2002-03-25 at 07:22, Peter Hardy wrote:
> > > This means you can mount Windows shares at boot time without storing
> > > passwords in /etc/fstab, which is readable by anyone.
> > 
> > or you can make /etc/fstab rw by root only, which is a lot simpler but
> > probably not as secure.
> 
> That's actually not very secure at all, as mount options are visible
> just using the mount command.

indeed but luckily not your samba passwd (doesn't even show up under ps)

> I'm not sure, but I think doing that would also cause problems with the
> user option, which lets regular users mount/unmount partitions.

you'd be wrong, a non-root user can still mount cdroms at least
on my box (but can't read /etc/fstab).  After all it's the 'mount'
command which has to read /etc/fstab not the person.

Dave.
-- 
SLUG - Sydney Linux User Group Mailing List - http://slug.org.au/
More Info: http://lists.slug.org.au/listinfo/slug

Reply via email to