View previous topic :: View next topic |
Author |
Message |
batistuta Veteran
![Veteran Veteran](/images/ranks/rank_rect_5_vet.gif)
![](images/avatars/gallery/Monkey Island/Monkey_Island_-_Lechuck3.gif)
Joined: 29 Jul 2005 Posts: 1384 Location: Aachen
|
Posted: Sat Jan 05, 2008 4:11 pm Post subject: [solved] mount -o loop as user |
|
|
Is there any way to mount a loop device as a user? I know I can allow that via the fstab, but that would be for a specific image. What about allowing to mount an arbitrary iso image as a user? This shouldn't be a security concern, because in theory you could burn the image and put it on your cd-rom drive and read it. So in terms of security I don't see a compromise. Thanx
Last edited by batistuta on Mon Jan 07, 2008 3:31 pm; edited 1 time in total |
|
Back to top |
|
![](templates/gentoo/images/spacer.gif) |
NeddySeagoon Administrator
![Administrator Administrator](/images/ranks/rank-admin.gif)
![](images/avatars/3946266373f47d606a2db3.jpg)
Joined: 05 Jul 2003 Posts: 54834 Location: 56N 3W
|
Posted: Sat Jan 05, 2008 5:13 pm Post subject: |
|
|
batistuta,
Allow the user the use of the mount command via sudo
sudo allows you to restrict who can do what as root _________________ Regards,
NeddySeagoon
Computer users fall into two groups:-
those that do backups
those that have never had a hard drive fail. |
|
Back to top |
|
![](templates/gentoo/images/spacer.gif) |
MostAwesomeDude Guru
![Guru Guru](/images/ranks/rank_rect_3.gif)
Joined: 12 Aug 2007 Posts: 373
|
Posted: Sat Jan 05, 2008 7:43 pm Post subject: |
|
|
Imagine, if you will:
Code: | $ mount -o loop -t iso9660 malicious-cd-image.iso /sbin |
So yes, it is a security risk. There's no way around it, sorry. Just use sudo. |
|
Back to top |
|
![](templates/gentoo/images/spacer.gif) |
batistuta Veteran
![Veteran Veteran](/images/ranks/rank_rect_5_vet.gif)
![](images/avatars/gallery/Monkey Island/Monkey_Island_-_Lechuck3.gif)
Joined: 29 Jul 2005 Posts: 1384 Location: Aachen
|
Posted: Mon Jan 07, 2008 3:31 pm Post subject: |
|
|
@NeddySeagoon thanks for the hint... I was just looking for an easier way to do it, maybe by allowing any user to mount at a specific location.
@MostAwesomeDude Good point, didn't think about that
@NeddySeagoon (again): congratulations for your new position, you more than deserve it.
I'll closed as solved |
|
Back to top |
|
![](templates/gentoo/images/spacer.gif) |
|