Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 4 Aug 2000 17:28:58 -0700 (PDT)
From:      Dima Dorfman <dima@unixfreak.org>
To:        npd@el.com.br
Cc:        freebsd-questions@freebsd.org
Subject:   Re: What am I missing? ( NFS )
Message-ID:  <20000805002858.2E3D71F18@static.unixfreak.org>
In-Reply-To: <398B1055.F63AD5B4@el.com.br> from Gilson de Paiva at "Aug 4, 2000 03:49:57 pm"

next in thread | previous in thread | raw e-mail | index | archive | help
> Hi list,
> I'm trying to set up a machine that will export a filesystem used to cvsup the FreeBSD and
> it's ports source.
> I've been reading the man pages and searching on the web and http://docs.freebsd.org/ but
> couldn't find out a solution to these error messages:
> 
> 1-) On a remote machine, the user root can issue a mount withou problems, only ordinary
> users get the following:
> 
> bash-2.03$ mount dialup:/usr/src /home/g-paiva/temp <enter>
> nfs: can't update /var/db/mounttab for dialup:/usr/src
> nfs: /usr/home/g-paiva/temp: Operation not permitted
> bash-2.03$ 
> 
> 2-) Locally, again, root is allowed to mount, except other users:
> 
> bash-2.03$ mount dialup:/usr/src /home/g-paiva/temp <enter>
> nfs: /usr/home/g-paiva/temp: Operation not permitted
> bash-2.03

Ordinary users are not supposed to be able to mount and unmount
drives.  Allowing them to do so will open up a very, very large
security whole.  What do you think will happen when somebody mounts a
drive on /etc with their own configuration files on it?

Hope this helps

-- 
Dima Dorfman <dima@unixfreak.org>
Finger dima@unixfreak.org for public PGP key.

"Gravitation is not responsible for people falling in love."
	-- Albert Einstein


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20000805002858.2E3D71F18>