Let me reiterate a little clearer. For my systems I had a few choices. Disable udev and use sudo or another auto-mounting package. I wrote udev rules with flush and sync as the unmount wasn't working properly and I'm not going to spend time picking through the mess of udev rules etc.. It wasn't a pleasant experience and works but doesn't integrate fully with the file managers etc.. But that's OK for ME.
The real issue for me is as rightly recommended in many unix security books and in proper unix tradition, you should not especially on reasonably secure systems allow write and execute except by hopefully well coded priviledged processes like a package manager to any area of your filesystem. Finally the dismissal of /tmp rightly being mounted noexec is finally regaining traction in the Linux world after many years of wrongful dismissal in the past. This type of security misunderstanding/blazaness may explain to some degree why these defaults have prevailed. It is easy to mount a home partition exec in fstab for gamers or wine users, In fact most distros force this by default as /home is for ease of install incorrectly situated in root /. It is also easy in more than one way (udev, fstab) and without consequence to specify a particular usb to mount exec. Any pushback that I can see should therefore be dismissed. It is wrong to force extra work on to people who choose to mount /home, /tmp etc. noexec and find udev then breaks this policy by allowing users to introduce programs via usb, intentionally or not in the case of system attacks from unmoniitored usbs or users who download onto usb rather than the home partition, Some organisations disable the usbs at the bios level. Local exploits are rife as kernel.org found out and you may wish or be forced to permit wine execution of pre-determined binaries but not wish execution of user-determined .exes. The preferable alternative to a default of noexec, which would resolve the countless blogs and recent Arch linux mailing list thread of particular options (sync) for certain filesystems "http://mailman.archlinux.org/pipermail/arch- general/2011-December/023091.html" is to add an ENV or Variable to udev rules preferably picked up from a central config file like fstab that sets the default mount options. The default mount location would also be handy for read-only systems, but of no necessity. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/880965 Title: Automount options To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/udisks/+bug/880965/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
