[SWLUG] mount options

Dick Porter dick at acm.org
Tue Feb 24 15:11:41 UTC 2004


On Tue, 2004-02-24 at 11:19, bascule wrote:
> since as a user i can't mount files via loopback i have written a one liner to 
> be run via sudo,
> while reading around i came across a consensus that allowing users to mount 
> anything not explicitly defined in the fstab is a badthing(tm),
> given that there may be setuid, dev files etc, i understand that but i'm 
> assuming that putting all the nosuid etc stuff in the oneliner and making it 
> only read/write by root i mostly obviate this risk? as a user i can only 
> mount a file with the options listed in the root script and i can't edit that 
> script.

Why not just add a loopback mount point to fstab (with noauto, so it
doesn't try and mount it at bootup and user so you don't need to be
root) and just copy any file you want to mount to that place, then mount
it?

- Dick






More information about the Swlug mailing list