Preventing access to FAT partition

arubin · 09-07-2012, 02:13 AM

I have just set up dual booting to my new UEFI/GPT.

I have a concern that it seems that any user can mount and potentially modify files in the small boot partition used by UEFI/GPT at sdb1. The partition comes up on the list on the left in Dolphin

How do I set things so that this partition is hidden and users do not have access?

TIA

guanx · 09-07-2012, 08:56 AM

What about adding a line to "/etc/fstab"

Code:

/dev/your_partition  /some_mount_point  vfat   defaults,noauto 1 2

arubin · 09-07-2012, 11:18 AM

I was thinking along the lines of

Quote:

/dev/partition none nouser,defaults

tc_ · 09-08-2012, 10:49 AM

According to the manpage of "mount" and "fstab", "defaults" includes "nouser", so "nouser" is superfluous. However, "defaults" also includes "auto", which will mount the partition at boot time. Guanx solution prevents this behaviour. You might also want this partition to be mounted read-only via

Code:

/dev/partition /mountpoint vfat defaults,noauto,ro 1 2

so that mounting the partition in rw-mode requires explicit specification. This will force the superuser (i.e. you) to think twice before doing any modifications to this partition.

For more information, see

Code:

$ man fstab 
$ man mount