From owner-freebsd-questions@FreeBSD.ORG Thu Feb 9 14:21:47 2006 Return-Path: X-Original-To: freebsd-questions@freebsd.org Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 9C02716A433 for ; Thu, 9 Feb 2006 14:21:47 +0000 (GMT) (envelope-from norgaard@locolomo.org) Received: from strange.daemonsecurity.com (59.Red-81-33-11.staticIP.rima-tde.net [81.33.11.59]) by mx1.FreeBSD.org (Postfix) with ESMTP id 2C1D243D46 for ; Thu, 9 Feb 2006 14:21:46 +0000 (GMT) (envelope-from norgaard@locolomo.org) Received: from [172.24.8.84] (generic.atosorigin.es [212.170.156.200]) by strange.daemonsecurity.com (Postfix) with ESMTP id CF8A12E041; Thu, 9 Feb 2006 15:21:48 +0100 (CET) Message-ID: <43EB4FF1.60703@locolomo.org> Date: Thu, 09 Feb 2006 15:21:37 +0100 From: Erik Norgaard User-Agent: Thunderbird 1.5 (X11/20060118) MIME-Version: 1.0 To: Robin Becker References: <43EB4E9E.30502@chamonix.reportlab.co.uk> In-Reply-To: <43EB4E9E.30502@chamonix.reportlab.co.uk> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Cc: freebsd-questions@freebsd.org Subject: Re: configure acls on remote machine X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 09 Feb 2006 14:21:47 -0000 Robin Becker wrote: > I have a remote freebsd host with root access via ssh user login and su. > I would like to configure acls for the /home mount, but am unsure if I > can do this remotely. > > Last time I tried to reboot the machine via su root it went dead for 24h > while a human was sent to press a button or something. > > I see possible options as > 1) switch to single user mode somehow and then unmount /home and > configure acls with tunefs > > 2) su to root > kill processes using /home > do the umount and so on with /home unmounted. > remount /home > > 3) some other method. > > > I imagine it might be quite hard to do 1 and 2 seems difficult unless I > have an ssh to a home folder which isn't under /home. > > Any ideas welcome. Why don't you just create a user for this specific task with home dir on some other partition? Then you will ssh to a folder not under /home and you can do 2). Cheers, Erik -- Ph: +34.666334818 web: www.locolomo.org S/MIME Certificate: www.daemonsecurity.com/ca/8D03551FFCE04F06.crt Subject ID: 9E:AA:18:E6:94:7A:91:44:0A:E4:DD:87:73:7F:4E:82:E7:08:9C:72 Fingerprint: 5B:D5:1E:3E:47:E7:EC:1C:4C:C8:3A:19:CC:AE:14:F5:DF:18:0F:B9