From owner-freebsd-stable Tue Jul 4 2: 8:59 2000 Delivered-To: freebsd-stable@freebsd.org Received: from salmon.maths.tcd.ie (salmon.maths.tcd.ie [134.226.81.11]) by hub.freebsd.org (Postfix) with SMTP id AFF0637B587 for ; Tue, 4 Jul 2000 02:08:55 -0700 (PDT) (envelope-from dwmalone@maths.tcd.ie) Received: from walton.maths.tcd.ie by salmon.maths.tcd.ie with SMTP id ; 4 Jul 2000 10:08:45 +0100 (BST) Date: Tue, 4 Jul 2000 10:08:45 +0100 From: David Malone To: Brad Knowles Cc: cjclark@alum.mit.edu, Vivek Khera , freebsd-stable@FreeBSD.ORG Subject: Re: fstab mount options Message-ID: <20000704100845.B10201@walton.maths.tcd.ie> References: <14689.1084.894512.504331@onceler.kcilink.com> <20000703163045.A248@dialin-client.earthlink.net> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2.2i In-Reply-To: ; from blk@skynet.be on Tue, Jul 04, 2000 at 09:54:32AM +0200 Sender: owner-freebsd-stable@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG On Tue, Jul 04, 2000 at 09:54:32AM +0200, Brad Knowles wrote: > > From the comment, I would say he has a SCSI Zip drive. The same line > > could apply to Jaz, an ancient Bernoull, or the like. > Right, but if he had any other SCSI disks on the system (such as > the disk with /, /usr, /var, etc...), wouldn't this also allow them > to be mounted & unmounted as desired by the user? His script only chmoded da0 - which possibly contains /, /usr or /var but if you're doing this you probably know not to chmod da0 world r/w. > Certainly if you're talking about your own laptop or dedicated > desktop machine, the rules can be relaxed somewhat. However, in > general this just seems to be a particularly unsafe practice. That > is, unless I've missed something fundamental? Yep - you shouldn't be able to use the rest of the SCSI disks unless you chmod them too - I guess it should be roughly as safe as chmoding floppy drives to allow people to mount them. Mind you, it people can mount filesystems they can probably panic the machine by corrupting the filesystem before it's mounted and then using it. David. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-stable" in the body of the message