Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 9 Jun 2003 21:02:25 -0400
From:      Anthony Schneider <anthony@x-anthony.com>
To:        Brett Glass <brett@lariat.org>
Cc:        security@freebsd.org
Subject:   Re: Removable media security in FreeBSD
Message-ID:  <20030610010225.GA42913@x-anthony.com>
In-Reply-To: <200306080728.BAA24342@lariat.org>
References:  <200306080728.BAA24342@lariat.org>

index | next in thread | previous in thread | raw e-mail

[-- Attachment #1 --]
if devfs supports (or soon will support) filesystem ACLs, that might be the
way to go.  obviously this won't get around the "trusted media" problem...

-Anthony.

On Sun, Jun 08, 2003 at 01:28:50AM -0600, Brett Glass wrote:
> I'm working with a FreeBSD user -- a teacher -- who's running KDE on a system
> on which she neither has nor wants root privileges. She wants to be able to
> mount and unmount floppies and ZIP cartridges from within KDE, using the
> standard KwikDisk utility (which, by the way, generates mount and unmount
> command that don't conform to FreeBSD syntax; however, it appears possible
> to fix this by customizing the commands).
> 
> I don't want to open up the floppy and ZIP drives to all users simultaneously,
> since this would allow anyone to write someone else's removable media. Is
> there a standard, SECURE way of allowing an unprivileged user at the console
> to get at removable media that s/he has inserted in the machine?
> 
> --Brett Glass
> 
> _______________________________________________
> freebsd-security@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-security
> To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.org"

[-- Attachment #2 --]
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.7 (FreeBSD)

iD8DBQE+5S4gKUeW47UGY2kRAqRPAJ9v+hkqyT+tMdw3W2+cTpPw8za3ewCdHbqk
KpC5MydVwoycYCYyyYGr/Ng=
=Eu66
-----END PGP SIGNATURE-----
help

Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20030610010225.GA42913>