From owner-freebsd-questions  Wed Jan 31  7:39:44 2001
Delivered-To: freebsd-questions@freebsd.org
Received: from gekko.i-clue.de (server.ms-agentur.de [62.153.134.194])
	by hub.freebsd.org (Postfix) with ESMTP id 97D5237B503
	for <questions@FreeBSD.ORG>; Wed, 31 Jan 2001 07:39:23 -0800 (PST)
Received: from i-clue.de (automatix.i-clue.de [192.168.0.112])
	by gekko.i-clue.de (8.9.3/8.9.3/SuSE Linux 8.9.3-0.1) with ESMTP id RAA11338;
	Wed, 31 Jan 2001 17:47:06 +0100
Message-ID: <3A7831FD.79D35FE2@i-clue.de>
Date: Wed, 31 Jan 2001 16:40:45 +0100
From: Christoph Sold <so@server.i-clue.de>
Reply-To: so@server.i-clue.de
X-Mailer: Mozilla 4.75 [de] (WinNT; U)
X-Accept-Language: de
MIME-Version: 1.0
To: so@server.ms-agentur.de
Cc: Brandon Fosdick <bfoz@glue.umd.edu>, questions@FreeBSD.ORG
Subject: Re: A different "user mounting of /cdrom"
References: <3A778EA0.2ED43768@glue.umd.edu> <3A782CAF.8AB6AE40@i-clue.de>
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.ORG

Ooops, didn't paste completely...

Christoph Sold schrieb:
> 
> Brandon Fosdick schrieb:
> >
> > Ok, so I've been through the FAQ entry for allowing users to
> > mount/umount removable media. It works exactly like the FAQ said it
> > would, and thats my problem.
> >
> > The provided method allows users to mount media to directories owned by
> > the user in question. How do I allow many users to mount the cdrom to
> > /cdrom as opposed to ${HOME}/whatever? AFAIK I can't make /cdrom owned
> > by all of the users, and setting the group on /cdrom didn't work.
> 
> Have a look at /usr/ports/security/sudo.
> 
> I'd config it this way:
> 
> ---</usr/local/etc/sudoers:>---
> # sudoers file.
> #
> # This file MUST be edited with the 'visudo' command as root.
> #
> # See the man page for the details on how to write a sudoers file.
> #
> 
> # Host alias specification
> 
> # User alias specification
> User_alias  CD_ROM_USERS=luserOne,luserTwo,anotherLuser
> 
> # Cmnd alias specification
> Cmnd_alias  MOUNT_CD=/sbin/mount /cdrom


# User privilege specification
root    ALL=(ALL) ALL
CD_ROM_USERS ALL=MOUNT_CD

> ---<snip>---
> 
> This way, the named lusers may do
>    sudo /sbin/mount /cdrom
> as root, without giving them a root passwd.
> 
> Of course, you should allow them to unmount the darn thing, too.
> 
> HTH
> -Christoph Sold


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message