On Thu, Aug 10, 2000 at 01:35:36PM -0400, rpjday wrote:
> On Thu, 10 Aug 2000, Steve Borho wrote:
> > mount/unmounting drives requires root access (since you're modifying
> > important filesystem tables).
> > 
> > Since /bin/mount is setuid root, it can allow normal users to mount
> > some drives if it is configured to.
> 
> this still doesn't answer the question.  the option "user" makes
> the filesystem mountable by regular users.  so how is the option
> "owner" different?

from the mount man page:

       Thus, given a line
              /dev/cdrom  /cd  iso9660  ro,user,noauto,unhide
       any  user  can  mount the iso9660 file system found on his
       CDROM using the command
              mount /dev/cdrom
       or
              mount /cd
       For more  details,  see  fstab(5).   Only  the  user  that
       mounted  a  filesystem  can unmount it again.  If any user
       should be able to unmount, then use users instead of  user
       in  the  fstab  line.   The owner option is similar to the
       user option, with the restriction that the  user  must  be
       the owner of the special file. This may be useful e.g. for
       /dev/fd if a login script makes the console user owner  of
       this device.

Red Hat's login (PAM) scripts change the ownership of the console,
cdrom, floppy, and other devices to your userid when you log into the
console.  Then in /etc/fstab they add the 'owner' tag to those mount
points.  Now anyone who logs into the console can mount those devices
without being root.

The only problem with this scheme is that multiple people can log into
the console... ie: multiple VT's plus X, and only the last one to log
in has ownership rights.

-- 
Steve Borho                      Voice:  314-429-8300 ext:3042
Member of Technical Staff
Celox Networking Inc

Fortune of the day:
Death is nature's way of telling you to slow down.



_______________________________________________
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list

Reply via email to