You were right Michael, this one was due to extra options that added by mount. The manual page for "mount" (on Ubuntu) states the following for the option "user":

  This option implies the options noexec, nosuid, and nodev
  (unless  overridden by subsequent options, as in the option
  line user,exec,dev,suid).

So, when the option "user" is added to the partition in fstab one also have to add "exec,dev,suid" explicitly.

Sorry for consuming bandwidth on this, should have read the man page more closely.

/Stefan


Stefan Farestam wrote the following on 09/06/2007 02:21 PM:


Michael Halcrow wrote the following on 09/06/2007 08:23 PM:
On Thu, Sep 06, 2007 at 08:08:32PM +0200, Stefan Farestam wrote:
Ok. Any guess as to what I need to change /update in my distro to
get this working? I use a stock kernel from kernel.org instead of
the one supplied by Ubuntu.

I don't think anything that drastic is going to be necessary. The
kernel you are using does not matter. What matters is what /bin/mount
is adding to the -o option set when you perform the mount. It's going
to take some detective work to find out why /bin/mount is setting the
noexec flag in your particular case; maybe it's something in your
/etc/fstab, or maybe it has something to do with your flags set on
your lower mount.

Interesting. Your comments prompted me to try around a bit with mount options and I discovered that if I mount the encrypted file system explicitly the noexec file is not set but when I use "mount -i" it is set.

This works fine (mounts the file system and noexec flag is not set in /etc/mtab):

mount -t ecryptfs /b/encrypted /b/protected -o cipher=aes,ecryptfs_key_bytes=32

This does not work (mounts the file system ok but yields the noexec flag in /etc/mtab):

   mount -i

What could be going on here?

--
Stefan Farestam
Mobile: +46 70 649 6838
------------------------------------------------------------------------

-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >>  http://get.splunk.com/
------------------------------------------------------------------------

_______________________________________________
eCryptfs-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/ecryptfs-users

--
Stefan Farestam
Mobile: +46 70 649 6838

-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2005.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
_______________________________________________
eCryptfs-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/ecryptfs-users

Reply via email to