Using HAL fdi policy to restrict access to a mounted USB

vsumanth10 · 01-12-2010, 02:41 PM

Hi,

I have a requirement of mounting an external usb with NTFS filesystem and allowing restricting its access only to the console user(even restricting access to a single group is fine). I am able to mount the usb by using the fdi policy below. However, I want the access to be restricted to a single user or a group. Is there anything that I'm missing here. I did search on the internet, but couldn't find anything in this regard. Plz help!!!

fdi policy -

<?xml version="1.0" encoding="UTF-8"?> 



<deviceinfo version="0.2">
<device>
<match key="volume.fstype" string="ntfs">
<match key="@block.storage_device:storage.hotpluggable" bool="true">
<merge key="volume.fstype" type="string">ntfs-3g</merge>
<merge key="volume.policy.mount_filesystem" type="string">ntfs-3g</merge>
</match>
</match>
</device>
</deviceinfo>

Thanks,
Sumanth

onebuck · 01-13-2010, 07:41 AM

Hi,

Look at setting a password for 'group';

Quote:

excerpt from 'man group';

NAME
group - user group file

DESCRIPTION
/etc/group is a text file which defines the groups on the system. There is one entry per line, with
the following format:

group_name:passwd:GID:user_list

The field descriptions are:

group_name
the name of the group.

password
the (encrypted) group password. If this field is empty, no password is needed.

GID the numerical group ID.

user_list
a list of the usernames that are members of this group, separated by commas.

FILES
/etc/group