Gentoo Forums
Gentoo Forums
Gentoo Forums
Quick Search: in
[solved] mount -o loop as user
View unanswered posts
View posts from last 24 hours

 
Reply to topic    Gentoo Forums Forum Index Networking & Security
View previous topic :: View next topic  
Author Message
batistuta
Veteran
Veteran


Joined: 29 Jul 2005
Posts: 1384
Location: Aachen

PostPosted: Sat Jan 05, 2008 4:11 pm    Post subject: [solved] mount -o loop as user Reply with quote

Is there any way to mount a loop device as a user? I know I can allow that via the fstab, but that would be for a specific image. What about allowing to mount an arbitrary iso image as a user? This shouldn't be a security concern, because in theory you could burn the image and put it on your cd-rom drive and read it. So in terms of security I don't see a compromise. Thanx

Last edited by batistuta on Mon Jan 07, 2008 3:31 pm; edited 1 time in total
Back to top
View user's profile Send private message
NeddySeagoon
Administrator
Administrator


Joined: 05 Jul 2003
Posts: 54834
Location: 56N 3W

PostPosted: Sat Jan 05, 2008 5:13 pm    Post subject: Reply with quote

batistuta,

Allow the user the use of the mount command via sudo
sudo allows you to restrict who can do what as root
_________________
Regards,

NeddySeagoon

Computer users fall into two groups:-
those that do backups
those that have never had a hard drive fail.
Back to top
View user's profile Send private message
MostAwesomeDude
Guru
Guru


Joined: 12 Aug 2007
Posts: 373

PostPosted: Sat Jan 05, 2008 7:43 pm    Post subject: Reply with quote

Imagine, if you will:

Code:
$ mount -o loop -t iso9660 malicious-cd-image.iso /sbin


So yes, it is a security risk. There's no way around it, sorry. Just use sudo.
Back to top
View user's profile Send private message
batistuta
Veteran
Veteran


Joined: 29 Jul 2005
Posts: 1384
Location: Aachen

PostPosted: Mon Jan 07, 2008 3:31 pm    Post subject: Reply with quote

@NeddySeagoon thanks for the hint... I was just looking for an easier way to do it, maybe by allowing any user to mount at a specific location.

@MostAwesomeDude Good point, didn't think about that :D

@NeddySeagoon (again): congratulations for your new position, you more than deserve it.

I'll closed as solved
Back to top
View user's profile Send private message
Display posts from previous:   
Reply to topic    Gentoo Forums Forum Index Networking & Security All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum