From owner-freebsd-questions@FreeBSD.ORG  Tue Apr  8 14:29:16 2003
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id BE31737B401
	for <freebsd-questions@freebsd.org>;
	Tue,  8 Apr 2003 14:29:16 -0700 (PDT)
Received: from mired.org (ip68-97-54-220.ok.ok.cox.net [68.97.54.220])
	by mx1.FreeBSD.org (Postfix) with SMTP id A767243F75
	for <freebsd-questions@freebsd.org>;
	Tue,  8 Apr 2003 14:29:15 -0700 (PDT)
	(envelope-from mwm-dated-1050269355.841ea4@mired.org)
Received: (qmail 33579 invoked from network); 8 Apr 2003 21:29:15 -0000
Received: from localhost.mired.org (HELO guru.mired.org) (127.0.0.1)
  by localhost.mired.org with SMTP; 8 Apr 2003 21:29:15 -0000
Received: by guru.mired.org (tmda-inject, from uid 100);
	Tue, 08 Apr 2003 16:29:15 -0500
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Message-ID: <16019.16170.409151.224235@guru.mired.org>
Date: Tue, 8 Apr 2003 16:29:14 -0500
To: "Randy Grafton" <rgrafton@indatacorp.com>
In-Reply-To: <000b01c2fedd$2a46dd70$7764a8c0@ITDept>
References: <000b01c2fedd$2a46dd70$7764a8c0@ITDept>
X-Mailer: VM 7.07 under 21.1 (patch 14) "Cuyahoga Valley" XEmacs Lucid
X-face: "5Mnwy%?j>IIV\)A=):rjWL~NB2aH[}Yq8Z=u~vJ`"(,&SiLvbbz2W`;
	h9L,Yg`+vb1>RG% *h+%X^n0EZd>TM8_IB;a8F?(Fb"lw'IgCoyM.[Lg#r\
From: Mike Meyer <mwm-dated-1050269355.841ea4@mired.org>
X-Delivery-Agent: TMDA/0.73 (Jet Pilot)
cc: freebsd-questions@freebsd.org
Subject: Re: fbtab and cdrom
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 08 Apr 2003 21:29:17 -0000

In <000b01c2fedd$2a46dd70$7764a8c0@ITDept>, Randy Grafton <rgrafton@indatacorp.com> typed:
> I've just installed 4.8 and am having some trouble with non-root users
> mounting cdroms. I have following entries in /etc/fbtab:
[...]
> My goal is that a non-root user can log in to the console and execute a
> script that mounts the cdrom, copies its contents to a folder on the system
> and then unmounts the cdrom.
> Any and all help is appreciated.

Normal users are - by default - not permitted to mount file
systems. Anyone who can mount a file system can get a root shell.

To enable this, you need to do:

# sysctl vfs.usermount=1

Add a "vfs.usermount=1" line to /etc/sysctl.conf to get this done at
automatically at boot time.

See the FAQ at <URL:
http://www.freebsd.org/doc/en_US.ISO8859-1/books/faq/disks.html#USER-FLOPPYMOUNT
> for more information.

	<mike
-- 
Mike Meyer <mwm@mired.org>		http://www.mired.org/consulting.html
Independent Network/Unix/Perforce consultant, email for more information.