From owner-freebsd-questions Thu Feb 11 05:40:06 1999 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id FAA16843 for freebsd-questions-outgoing; Thu, 11 Feb 1999 05:40:06 -0800 (PST) (envelope-from owner-freebsd-questions@FreeBSD.ORG) Received: from europe.std.com (europe.std.com [199.172.62.20]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id FAA16813 for ; Thu, 11 Feb 1999 05:40:01 -0800 (PST) (envelope-from lowell@world.std.com) Received: from world.std.com by europe.std.com (STD1.2/BZS-8-1.0) id IAA16738; Thu, 11 Feb 1999 08:39:58 -0500 (EST) Received: by world.std.com (TheWorld/Spike-2.0) id AA08711; Thu, 11 Feb 1999 08:39:58 -0500 To: freebsd-questions@FreeBSD.ORG Subject: Re: Mounting CDROM (or removable media) by users References: <19990210001221.19077.qmail@alpha.comkey.com.au> <199902101635.RAA03064@greatoak.home> From: Lowell Gilbert Organization: The World Public Access UNIX, Brookline, MA X-Newsreader: Gnus v5.5/Emacs 20.2 In-Reply-To: pcasidy@worldnet.fr's message of 10 Feb 1999 17:51:34 +0100 Date: 11 Feb 1999 08:39:57 -0500 Message-Id: Lines: 13 Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG pcasidy@worldnet.fr (Philippe CASIDY) writes: > I just want to know what is the technical reason why by default, only > root can mount the cdrom. Since no one else seems to have answered this (at least publicly), the answer is security. Imagine, for example, mounting CD-ROM with an suid root program on it. You could hack around this problem (as a starting point, note that the mount command already has nosuid and noexec options), but it's simpler to just control access to the device node itself. Be well. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message