From owner-freebsd-questions Wed Feb 10 11:47:53 1999 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id LAA10008 for freebsd-questions-outgoing; Wed, 10 Feb 1999 11:47:53 -0800 (PST) (envelope-from owner-freebsd-questions@FreeBSD.ORG) Received: from alpha.comkey.com.au (alpha.comkey.com.au [203.9.152.215]) by hub.freebsd.org (8.8.8/8.8.8) with SMTP id LAA09984 for ; Wed, 10 Feb 1999 11:47:47 -0800 (PST) (envelope-from gjb@comkey.com.au) Received: (qmail 23134 invoked by uid 1001); 10 Feb 1999 19:33:38 -0000 Message-ID: <19990210193338.23133.qmail@alpha.comkey.com.au> X-Posted-By: GBA-Post 1.04 06-Feb-1999 X-PGP-Fingerprint: 5A91 6942 8CEA 9DAB B95B C249 1CE1 493B 2B5A CE30 Date: Thu, 11 Feb 1999 05:33:38 +1000 From: Greg Black To: Philippe CASIDY Cc: freebsd-questions@FreeBSD.ORG Subject: Re: Mounting CDROM (or removable media) by users References: <199902101635.RAA03064@greatoak.home> In-reply-to: <199902101635.RAA03064@greatoak.home> of Wed, 10 Feb 1999 17:35:55 +0100 Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG > You example is not very revelant because you are comparing two > different system and it is very easy to find a workaround. It was perfectly relevant because *you* were comparing two different systems and I had already given you a good workaround. > Anyway, I like the sudo feature because as far as I understand, you can > easily choose who can or cannot mount a device. And you have stated more than once that you like the workaround I gave you. > I just want to know what is the technical reason why by default, only > root can mount the cdrom. There is no technical reason. But there are several compelling security reasons why you don't want to generally allow random users to mount anything (not just CDROMs) in places of their choosing. I know somebody else has covered this quite well, so I won't go over that ground again. -- Greg Black To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message