Restrict Mounted Disc Access

JC404 · 08-31-2003, 03:09 AM

Is there a way to prevent non-root users on seeing, gaining access, mounting, editing, and deleting the contents of a mounted hard drive (hdb) while maintaining the automount capabilities that I currently have when logging in as root?

hdb is also formatted as vfat btw.

markus1982 · 08-31-2003, 06:05 AM

I think you are looking for the umask option. For more details check the manpage of mount. A small example from my /etc/fstab:

/dev/fd0 /floppy auto ro,nodev,nosuid,noexec,umask=137 0 2

JC404 · 09-01-2003, 12:51 AM

What number should I place in umask=000? I read the man but I can't understand what I should use.

Mathieu · 09-01-2003, 11:29 AM

markus1982 gave you the answer => umask=137
For example:

Code:

mount -t vfat -o defaults,umask=137 /dev/hda1 /mnt/windows98

markus1982 · 09-01-2003, 12:58 PM

With umask you have to think the other way round. umask=777 means NOBODY (except root of course) has access. umask=000 means everybody has FULL access.... man umask for more details.

JC404 · 09-03-2003, 01:43 AM

/dev/hdb6 /mnt/hdb6 vfat umask=000,auto,users,rw 0 0

mine is like above but when I select umask=777, I also can't access it.

JC404 · 09-03-2003, 10:34 PM

unSpawn · 09-06-2003, 06:48 AM

mine is like above but when I select umask=777, I also can't access it.
Please reread the thread carefully, the answer is there.
Like markus already said, 777 NOBODY is granted access. Try the other value.