From owner-freebsd-questions@FreeBSD.ORG Mon Jan 12 14:43:08 2004 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id EE90B16A4DC for ; Mon, 12 Jan 2004 14:43:08 -0800 (PST) Received: from mailout.informatik.tu-muenchen.de (mailout.informatik.tu-muenchen.de [131.159.0.5]) by mx1.FreeBSD.org (Postfix) with ESMTP id 7A26443D4C for ; Mon, 12 Jan 2004 14:43:07 -0800 (PST) (envelope-from barner@in.tum.de) Received: by zi025.glhnet.mhn.de (Postfix, from userid 1000) id 2E0E892B6; Mon, 12 Jan 2004 23:43:06 +0100 (CET) Date: Mon, 12 Jan 2004 23:43:05 +0100 From: Simon Barner To: Eric F Crist Message-ID: <20040112224305.GA687@zi025.glhnet.mhn.de> References: <200401121441.05186.ecrist@adtechintegrated.com> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="gKMricLos+KVdGMg" Content-Disposition: inline In-Reply-To: <200401121441.05186.ecrist@adtechintegrated.com> User-Agent: Mutt/1.5.4i X-Virus-Scanned: by amavisd-new at informatik.tu-muenchen.de cc: freebsd-questions@freebsd.org Subject: Re: Mounting as non-root? X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 12 Jan 2004 22:43:09 -0000 --gKMricLos+KVdGMg Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Hi, > What is the most secure way to enable mounting of flash drives, cdroms, a= nd=20 > floppies? I've seen solutions that include setting setuid on mount. I w= ould=20 > rather not go this route. Is there any other easy, secure way? You can allow mounting for ordinary users with the following sysctl(8): vfs.usermount With Gnome 2.5 (probably also with 2.4, but I need to run the development version in order to help with some ports) users can mount cdroms and floppies on mount points in their home directories (~/cdrom and ~/floppies). Unfortunately, you will need appropriate entries into /etc/fstab for every user. Simon --gKMricLos+KVdGMg Content-Type: application/pgp-signature; name="signature.asc" Content-Description: Digital signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.3 (FreeBSD) iD8DBQFAAyL5Ckn+/eutqCoRAjH4AJ0cmU+gIbqQh7IhxJjDvn3WEz1Z8ACfXi/K pm9Z37946VQgevyoslO4CI8= =LQBM -----END PGP SIGNATURE----- --gKMricLos+KVdGMg--