crypto-loop mounting question

Jacobs · Posted: Sun May 11, 2003 5:38 pm Post subject: crypto-loop mounting question

hi, i've a crypto-loop filesystem and i wonder if there is some way to allow only the user who mounted it to access it.

thanks for any idea

joycea · Posted: Sun May 11, 2003 10:41 pm Post subject:

Not particularly familar with the cyrpto filesystem procedures but wouldn't the umask flag work for this?

Jacobs · Posted: Mon May 12, 2003 7:14 am Post subject:

I'm not sure it'd solve the problem. I want this: If user1 mounts /dev/loop0, than he and only he must have rwx access to the mounted fs (others shouldn't have any access at all). If user2 mounts it, than again, only user2 must have this access.

I'm not very familiar with umask, but I don't think there is some way how to set this via umask

, or is it?

joycea · Posted: Mon May 12, 2003 10:00 am Post subject:

Jacobs · Posted: Mon May 12, 2003 10:30 am Post subject:

ok, this may work! thanks.

but when I try it in real, something goes wrong. I have this in my /etc/fstab

Jacobs · Posted: Mon May 12, 2003 10:36 am Post subject:

by the way there is this message in syslog related to the mount failure:

tojo · n00b Joined: 09 Dec 2002 Posts: 72

Jacobs · Posted: Mon May 12, 2003 6:41 pm Post subject:

you don't understand - there is no way (at least I think so) how to specify in chmod the "user-who-mounted"

tojo · n00b Joined: 09 Dec 2002 Posts: 72

Ok, now I see what are you looking for

I think you have to change filesystem, more dummier fs i guess.

I made also these tests:

Jacobs · Posted: Mon May 12, 2003 9:11 pm Post subject:

yeah

you got it... thanks a lot.

just a try - is there some way how I can do this with ext3 or some other fs? (fat is a bit too dumb

)

I'm starting to realize that if the filesystem supports file access management (or however it is called), it may be a bit tricky to do what I want, right?

joycea · Posted: Mon May 12, 2003 10:29 pm Post subject:

I see where you are having the problems with the umask now and ext3, sorry for leading you down the wrong path.

In this case, why don't you just set the permissions on the root folder of the encrypted fs to match what you want to limit access to (i.e. chmod 700 ./) ? I think that should work for you.

tojo · n00b Joined: 09 Dec 2002 Posts: 72

Jacobs · Posted: Tue May 13, 2003 8:25 am Post subject:

hmm

but I don't have to override them - if the user who monted doesn't have file-base access to these files, it's ok for me. but I don't want anyone else to be allowed to access the partition (doesn't matter if he has some file-based access or not). so it's like two independent levels of access rights from which the effective rights are counted with logical AND (you mounted && you have file-based access = you can access the file).

but I think there is no support for this in linux mounting