How to prevent access to unmounted mount point?

stanleycia · 01-10-2010, 10:26 PM

Hi.

I'm using some software that using mount point such as truecrypt. I also mount shared folder on other machine (fileserver) and publish it using ftp. The problem is when the truecrypt volume dismounted or the shared folder mount point loosing connection to the fileserver, user can write to the mount point without knowing that they actually not writing to the truecrypt volume or to the shared folder.

My question is, when sometime the server reboot and truecrypt volume is not mounted yet, how to prevent write to the mount point? I dont run truecrypt mount automatically for security reason.

Some question for shared folder, if fileserver restart and the shared folder mount point got disconnected, how to prevent write to the mount point?

Thank you.

Agrouf · 01-11-2010, 04:10 AM

chmod a-w /path/to/mountpoint

DMahalko · 03-31-2010, 01:32 AM

Just a followup from google searching for a solution to this. 'chmod a-w' does not work for me if the mounting is done by the user, with an entry in fstab.

(I'm using cifs to mount windows server share, Ubuntu 8.04.)

/etc/fstab entry:

//10.0.0.15/winshare /media/backupsrv cifs rw,user,noauto,username=foo,password=bar 0 0

========
: ls -l /media/backupsrv
drwx------ 2 maint root 4096 2010-03-13 01:01 backupsrv

: mount //10.0.0.15/winshare
(success)
: umount //10.0.0.15/winshare
(success)
=========

: chown a-w backupsrv
: ls -l /media/backupsrv
dr-x------ 2 maint root 4096 2010-03-13 01:01 backupsrv

: mount //10.0.0.15/winshare
mount error: permission denied or not superuser and mount.cifs not installed SUID

,