Date: Mon, 9 Jun 2003 19:17:04 +0200 From: "Simon L. Nielsen" <simon@nitro.dk> To: zk <zk@wspim.edu.pl> Cc: security@freebsd.org Subject: Re: Removable media security in FreeBSD Message-ID: <20030609171703.GB405@nitro.dk> In-Reply-To: <20030609133931.GA471@hhos.serious.ld> References: <20030608080429.GA234@hhos.serious.ld> <Pine.NEB.3.96L.1030608115332.67632D-100000@fledge.watson.org> <20030609133931.GA471@hhos.serious.ld>
next in thread | previous in thread | raw e-mail | index | archive | help
--qcHopEYAB45HaUaB Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On 2003.06.09 15:39:31 +0200, zk wrote: > On Sun, Jun 08, 2003 at 11:57:04AM -0400, Robert Watson wrote: > >=20 > > If the definition of the policy really means "any user who can log in at > > the console", I'd change the chown/chmod bits to a pointer to fbtab, and > > use vfs.usermount. > >=20 > The problem with fbtab: i want to give mount permission to some console u= ser > and not to the other. Sounds like something sudo can solve - /usr/ports/security/sudo. --=20 Simon L. Nielsen --qcHopEYAB45HaUaB Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.2 (FreeBSD) iD8DBQE+5MEP8kocFXgPTRwRApnrAJ9v696c6HmY6aJee4JJ6bxwsow0eQCeP9lL WC2AmSEcRGNFvlk3hkGsOBU= =m6+L -----END PGP SIGNATURE----- --qcHopEYAB45HaUaB--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20030609171703.GB405>