From owner-freebsd-questions  Wed Jan 31  7:17: 2 2001
Delivered-To: freebsd-questions@freebsd.org
Received: from gekko.i-clue.de (server.ms-agentur.de [62.153.134.194])
	by hub.freebsd.org (Postfix) with ESMTP id 0BF9E37B491
	for <questions@FreeBSD.ORG>; Wed, 31 Jan 2001 07:16:43 -0800 (PST)
Received: from i-clue.de (automatix.i-clue.de [192.168.0.112])
	by gekko.i-clue.de (8.9.3/8.9.3/SuSE Linux 8.9.3-0.1) with ESMTP id RAA11070;
	Wed, 31 Jan 2001 17:24:26 +0100
Message-ID: <3A782CAF.8AB6AE40@i-clue.de>
Date: Wed, 31 Jan 2001 16:18:07 +0100
From: Christoph Sold <so@server.i-clue.de>
Reply-To: so@server.i-clue.de
X-Mailer: Mozilla 4.75 [de] (WinNT; U)
X-Accept-Language: de
MIME-Version: 1.0
To: Brandon Fosdick <bfoz@glue.umd.edu>
Cc: questions@FreeBSD.ORG
Subject: Re: A different "user mounting of /cdrom"
References: <3A778EA0.2ED43768@glue.umd.edu>
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.ORG



Brandon Fosdick schrieb:
> 
> Ok, so I've been through the FAQ entry for allowing users to
> mount/umount removable media. It works exactly like the FAQ said it
> would, and thats my problem.
> 
> The provided method allows users to mount media to directories owned by
> the user in question. How do I allow many users to mount the cdrom to
> /cdrom as opposed to ${HOME}/whatever? AFAIK I can't make /cdrom owned
> by all of the users, and setting the group on /cdrom didn't work.

Have a look at /usr/ports/security/sudo.

I'd config it this way:

---</usr/local/etc/sudoers:>---
# sudoers file.
#
# This file MUST be edited with the 'visudo' command as root.
#
# See the man page for the details on how to write a sudoers file.
#

# Host alias specification

# User alias specification
User_alias  CD_ROM_USERS=luserOne,luserTwo,anotherLuser

# Cmnd alias specification
Cmnd_alias  MOUNT_CD=/sbin/mount /cdrom
---<snip>---

This way, the named lusers may do
   sudo /sbin/mount /cdrom
as root, without giving them a root passwd.

Of course, you should allow them to unmount the darn thing, too.

HTH
-Christoph Sold


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message