From owner-freebsd-questions@FreeBSD.ORG Wed Dec 31 22:57:52 2003 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 1399416A4CE for ; Wed, 31 Dec 2003 22:57:52 -0800 (PST) Received: from cpanel10.gzo.com (69-56-171-54.theplanet.com [69.56.171.54]) by mx1.FreeBSD.org (Postfix) with ESMTP id 2257F43D41 for ; Wed, 31 Dec 2003 22:57:46 -0800 (PST) (envelope-from dany_list@natzo.com) Received: from pcp04639464pcs.gambrl01.md.comcast.net ([68.50.51.181] helo=natzo.com) by cpanel10.gzo.com with asmtp (TLSv1:RC4-MD5:128) (Exim 4.24) id 1Abwm2-0001KH-8v; Thu, 01 Jan 2004 00:57:38 -0600 Message-ID: <3FF3C574.60309@natzo.com> Date: Thu, 01 Jan 2004 02:00:04 -0500 From: Dany User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.6b) Gecko/20031208 X-Accept-Language: en-us, en MIME-Version: 1.0 To: Harald Schmalzbauer References: <3FF2612A.6050903@natzo.com> <200312311625.38220@harrymail> <3FF2ED2E.6040200@natzo.com> <200312311642.47172@harrymail> In-Reply-To: <200312311642.47172@harrymail> Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit X-AntiAbuse: This header was added to track abuse, please include it with any abuse report X-AntiAbuse: Primary Hostname - cpanel10.gzo.com X-AntiAbuse: Original Domain - freebsd.org X-AntiAbuse: Originator/Caller UID/GID - [0 0] / [47 12] X-AntiAbuse: Sender Address Domain - natzo.com cc: freebsd-questions@freebsd.org Subject: Re: Mounting CDROM as user under 5.x X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 01 Jan 2004 06:57:52 -0000 The "operator" trick worked. Thanks again and happy new year. Since I've started the FreeBSD experience, I've collected about 20 pages of tips and tricks to get stuff running. I will probably publish something so others can enjoy it. Dany Harald Schmalzbauer wrote: >On Wednesday 31 December 2003 16:37, Dany wrote: > > >>Thanks Harry for taking the time to answer my questions. I think based >>on your comments it should work. >> >>Is there any security concern having a user belonging to the group >>operator ? >> >> > >I never really cared about. AnonFTP is owned by operator, but in general I >think wheel is worse than operator. >Please correct me anybody, I don't really care on my workstation ;) >Best is to have a look through the (default) filesystem and see if operator >has any write permissions where it was no good. I'm quiet sure wheel has much >too much read permissions for "normal" users. But that doesn't matter for >useres who can su ;) > >Happy new year, > >-Harry > > > >>Thanks again >>Dany >> >>Harald Schmalzbauer wrote: >> >> >>>On Wednesday 31 December 2003 16:07, Dany wrote: >>> >>> >>>>Harald Schmalzbauer wrote: >>>> >>>> >>>*SNIP* >>> >>> >>> >>>>This is pretty much what I've tried. My user is in the Wheel group. >>>>Would this exact configuration work ? Should I set any other >>>>permission in order to have the user from the wheel group to mount >>>>drives? >>>> >>>>Thanks for posting your configuration. >>>> >>>>PS: One thing I've noticed with this specific user, whenever he creates >>>>something the file/directory will show owner:username group:username. >>>>I've used the command "groups" as well as chpass I think and they gave >>>>me only one group for this username... wheel. Why doesn't wheel appear >>>>as the group owner for stuff that username is creating ? >>>> >>>> >>>When you add a user with "adduser" by default FreeBSD creates a group >>>similar named like the username. If you later say that this user should >>>be in group wheel it's additional. >>> >>> >>> >>>>>>>>>added the following to /dev/devfs.conf >>>>>>>>>link acd0 cdrom >>>>>>>>>perm acd0 0660 >>>>>>>>> >>>>>>>>> >>>This line just gives write access to group. You can either add the line: >>>own acd0 root:wheel >>> >>>or you edit /etc/groups and add your user to the group operator. >>>I'd prefere the latter. >>> >>>Here's my simple /etc/group example: >>># $FreeBSD: src/etc/group,v 1.28 2003/04/27 05:49:53 imp Exp $ >>># >>>wheel:*:0:root,harry >>>daemon:*:1: >>>kmem:*:2: >>>sys:*:3: >>>tty:*:4: >>>operator:*:5:root,harry >>>mail:*:6: >>>bin:*:7: >>>news:*:8: >>>man:*:9: >>>games:*:13: >>>staff:*:20: >>>sshd:*:22: >>>smmsp:*:25: >>>mailnull:*:26: >>>guest:*:31: >>>bind:*:53: >>>uucp:*:66: >>>dialer:*:68: >>>network:*:69: >>>www:*:80: >>>nogroup:*:65533: >>>nobody:*:65534: >>>harry:*:####: >>>uli:*:####: >>>schowi:*:####: >>>administrator:*:####: >>>alle:*:####:root,harry,uli,schowi,administrator >>>setiathome:*:####: >>> >>>-Harry >>> > > >