From owner-freebsd-security@FreeBSD.ORG  Mon Jun  9 14:13:25 2003
Return-Path: <owner-freebsd-security@FreeBSD.ORG>
Delivered-To: freebsd-security@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 5032A37B401
	for <security@freebsd.org>; Mon,  9 Jun 2003 14:13:25 -0700 (PDT)
Received: from fubar.adept.org (fubar.adept.org [63.147.172.249])
	by mx1.FreeBSD.org (Postfix) with ESMTP id E179743FBF
	for <security@freebsd.org>; Mon,  9 Jun 2003 14:13:24 -0700 (PDT)
	(envelope-from mike@adept.org)
Received: by fubar.adept.org (Postfix, from userid 1001)
	id A959D1524B; Mon,  9 Jun 2003 14:08:01 -0700 (PDT)
Received: from localhost (localhost [127.0.0.1])
	by fubar.adept.org (Postfix) with ESMTP id A882315247
	for <security@freebsd.org>; Mon,  9 Jun 2003 14:08:01 -0700 (PDT)
Date: Mon, 9 Jun 2003 14:08:01 -0700 (PDT)
From: Mike Hoskins <mike@adept.org>
To: security@freebsd.org
In-Reply-To: <20030609171703.GB405@nitro.dk>
Message-ID: <20030609140347.B13040@fubar.adept.org>
References: <20030608080429.GA234@hhos.serious.ld>
 <Pine.NEB.3.96L.1030608115332.67632D-100000@fledge.watson.org>
 <20030609133931.GA471@hhos.serious.ld> <20030609171703.GB405@nitro.dk>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Subject: Re: Removable media security in FreeBSD
X-BeenThere: freebsd-security@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Security issues [members-only posting]
	<freebsd-security.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>,
	<mailto:freebsd-security-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-security>
List-Post: <mailto:freebsd-security@freebsd.org>
List-Help: <mailto:freebsd-security-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>,
	<mailto:freebsd-security-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Mon, 09 Jun 2003 21:13:25 -0000

On Mon, 9 Jun 2003, Simon L. Nielsen wrote:
> Sounds like something sudo can solve - /usr/ports/security/sudo.

That's what I've been doing.  It started off on my own machine, where I
wanted to use Gkrellm's "click to mount" buttons for floppy/cdrom.  I
installed sudo, gave myself passwordless permission to mount and umount
via sudoers, then configured Gkrellm to issue `sudo mount|umount...`

-mrh

--
From: "Spam Catcher" <spam-catcher@adept.org>
To: spam-catcher@adept.org
Do NOT send email to the address listed above or
you will be added to a blacklist!