On Fri, Dec 21, 2018 at 04:41:13PM +0100, Adrian Siemieniak wrote:

Hi,

> Hmm but fusefat is working - this is also block device.
> 
> p  fusefat - File System in User Space - Module for FAT

I actually tried it, but it does not work for me on devices
or I'm doing it wrong. According to the documentation this one
seems to be more centered on mounting image files. So no fuse "blkdev"
option involved.


> And I may be wrong, but this was working some time ago - I just did not
> checked it, since I had some lines in /etc/fstab for mounting my devices on
> auto with user rights. So if it was ntfs/vfat system used standard mount
> (ntfs3g - not fuse) and with exfat.. I'm not sure now...
> Anyway lately I used root, but yesterday I thought it's time to fix it
> and... :)

I think ntfs-3g is the better comparison, and they highlight the same issue
in the FAQ:
https://www.tuxera.com/community/ntfs-3g-faq/#useroption

So one option is doing the same and setuid the mount.exfat-fuse binary.

The other one would be using pmount and patching it yourself. The required
change is actually less intimidating then expected. Seems I'm not the only
one who looked into the issue.
Bugreport https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=755434
Relevant patch 
https://bugs.debian.org/cgi-bin/bugreport.cgi?att=1;bug=755434;filename=patch;msg=19


> Ando also fusermount is suidrooted
> $ ls -ld /bin/fusermount
> -rwsr-xr-x 1 root root 34896 Aug  5 17:07 /bin/fusermount

Well I don't want to look into who drops which privs when.


Just for the sake of completeness I had a look at the exfat-fuse source.
https://github.com/relan/exfat/blob/master/fuse/main.c#L495
There's the place where the "user=" option is set.

The blkdev option is added here
https://github.com/relan/exfat/blob/master/fuse/main.c#L530

So if you like you could comment out the stuff around L495
but then I'm pretty sure you end up with blkdev issue as explained above
in fusermount. That's at least how far I went with my attempt to understand
the issue. You can always try to open a question upstream on github to maybe
get a more detailed answer.

Sven

Reply via email to