From owner-freebsd-questions@FreeBSD.ORG  Fri Dec 23 05:37:46 2011
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: questions@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id ECA021065670
	for <questions@freebsd.org>; Fri, 23 Dec 2011 05:37:46 +0000 (UTC)
	(envelope-from freebsd@edvax.de)
Received: from mx01.qsc.de (mx01.qsc.de [213.148.129.14])
	by mx1.freebsd.org (Postfix) with ESMTP id AAC798FC14
	for <questions@freebsd.org>; Fri, 23 Dec 2011 05:37:46 +0000 (UTC)
Received: from r56.edvax.de (port-92-195-49-185.dynamic.qsc.de [92.195.49.185])
	by mx01.qsc.de (Postfix) with ESMTP id E87FA3CCBE;
	Fri, 23 Dec 2011 06:37:44 +0100 (CET)
Received: from r56.edvax.de (localhost [127.0.0.1])
	by r56.edvax.de (8.14.5/8.14.5) with SMTP id pBN5biYm005932;
	Fri, 23 Dec 2011 06:37:44 +0100 (CET)
	(envelope-from freebsd@edvax.de)
Date: Fri, 23 Dec 2011 06:37:44 +0100
From: Polytropon <freebsd@edvax.de>
To: Da Rock <freebsd-questions@herveybayaustralia.com.au>
Message-Id: <20111223063744.1894ceda.freebsd@edvax.de>
In-Reply-To: <4EF4010B.5040704@herveybayaustralia.com.au>
References: <4EF4010B.5040704@herveybayaustralia.com.au>
Organization: EDVAX
X-Mailer: Sylpheed 3.1.1 (GTK+ 2.24.5; i386-portbld-freebsd8.2)
Mime-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
Cc: questions@freebsd.org
Subject: Re: PolicyKit confusion
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
Reply-To: Polytropon <freebsd@edvax.de>
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Fri, 23 Dec 2011 05:37:47 -0000

On Fri, 23 Dec 2011 14:18:19 +1000, Da Rock wrote:
> I checked out /media/hal-* and I see that the mount occurs only as root. 
> How do I change that exactly? I need it showing for operator group. I've 
> searched high and low and googled my brains out, but anything remotely 
> related is for linux and udev.

I think I remember I got it working some time ago
(on a 7.1 system), relying on the Gnome HAL FAQ
which stated something like this:

File: /usr/local/etc/PolicyKit/PolicyKit.conf

<config version="0.1">

<match action="org.freedesktop.hal.storage.mount-removable">
  <match user="marcus">
    <return result="NNNNN"/>
  </match>
</match>

<match action="org.freedesktop.hal.storage.mount-fixed">
  <match user="marcus">
    <return result="NNNNN"/>
  </match>
</match>

</config>

For "NNNNN", use your user name; I think you can also
use more than one "match" section if you want to allow
access for other users. However, I doubt all this
HAL / DBUS / PolicyKit magic is really intended for
multi-user purposes. :-)

Note that HAL also has an option of "fixed mount points"
to be set at compile time. I think I had set it...

I'm also unsure if NFS mounts are "fixed" or "removable"
in PK terminology.



Regarding your second question, I can't provide any
further information. I just assume it's a means to
turn a safe multi-user system into an insecure
single-user system, which is what users expect. :-)



-- 
Polytropon
Magdeburg, Germany
Happy FreeBSD user since 4.0
Andra moi ennepe, Mousa, ...