From owner-freebsd-questions@FreeBSD.ORG Wed Dec 31 07:36:30 2003 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 4B29D16A4CE for ; Wed, 31 Dec 2003 07:36:30 -0800 (PST) Received: from cpanel10.gzo.com (69-56-171-54.theplanet.com [69.56.171.54]) by mx1.FreeBSD.org (Postfix) with ESMTP id EB24C43DA5 for ; Wed, 31 Dec 2003 07:35:00 -0800 (PST) (envelope-from dany_list@natzo.com) Received: from [12.146.133.135] (helo=natzo.com) by cpanel10.gzo.com with asmtp (TLSv1:RC4-MD5:128) (Exim 4.24) id 1AbiN7-0007d5-2V; Wed, 31 Dec 2003 09:34:57 -0600 Message-ID: <3FF2ED2E.6040200@natzo.com> Date: Wed, 31 Dec 2003 10:37:18 -0500 From: Dany User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.6b) Gecko/20031208 X-Accept-Language: en-us, en MIME-Version: 1.0 To: Harald Schmalzbauer References: <3FF2612A.6050903@natzo.com> <200312311553.31025@harrymail> <3FF2E64C.3020509@natzo.com> <200312311625.38220@harrymail> In-Reply-To: <200312311625.38220@harrymail> Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit X-AntiAbuse: This header was added to track abuse, please include it with any abuse report X-AntiAbuse: Primary Hostname - cpanel10.gzo.com X-AntiAbuse: Original Domain - freebsd.org X-AntiAbuse: Originator/Caller UID/GID - [0 0] / [47 12] X-AntiAbuse: Sender Address Domain - natzo.com cc: freebsd-questions@freebsd.org Subject: Re: Mounting CDROM as user under 5.x X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 31 Dec 2003 15:36:30 -0000 Thanks Harry for taking the time to answer my questions. I think based on your comments it should work. Is there any security concern having a user belonging to the group operator ? Thanks again Dany Harald Schmalzbauer wrote: >On Wednesday 31 December 2003 16:07, Dany wrote: > > >>Harald Schmalzbauer wrote: >> >> >*SNIP* > > >>This is pretty much what I've tried. My user is in the Wheel group. >>Would this exact configuration work ? Should I set any other >>permission in order to have the user from the wheel group to mount drives? >> >>Thanks for posting your configuration. >> >>PS: One thing I've noticed with this specific user, whenever he creates >>something the file/directory will show owner:username group:username. >>I've used the command "groups" as well as chpass I think and they gave >>me only one group for this username... wheel. Why doesn't wheel appear >>as the group owner for stuff that username is creating ? >> >> > >When you add a user with "adduser" by default FreeBSD creates a group similar >named like the username. If you later say that this user should be in group >wheel it's additional. > > > >>>>>>>added the following to /dev/devfs.conf >>>>>>>link acd0 cdrom >>>>>>>perm acd0 0660 >>>>>>> >>>>>>> > >This line just gives write access to group. You can either add the line: >own acd0 root:wheel > >or you edit /etc/groups and add your user to the group operator. >I'd prefere the latter. > >Here's my simple /etc/group example: ># $FreeBSD: src/etc/group,v 1.28 2003/04/27 05:49:53 imp Exp $ ># >wheel:*:0:root,harry >daemon:*:1: >kmem:*:2: >sys:*:3: >tty:*:4: >operator:*:5:root,harry >mail:*:6: >bin:*:7: >news:*:8: >man:*:9: >games:*:13: >staff:*:20: >sshd:*:22: >smmsp:*:25: >mailnull:*:26: >guest:*:31: >bind:*:53: >uucp:*:66: >dialer:*:68: >network:*:69: >www:*:80: >nogroup:*:65533: >nobody:*:65534: >harry:*:####: >uli:*:####: >schowi:*:####: >administrator:*:####: >alle:*:####:root,harry,uli,schowi,administrator >setiathome:*:####: > >-Harry > >