Hey all,
I'm setting up an automatic mount point on one of my servers. However, for this file I only want certain people (permissions) to access it once it is mounted. I'm figuring I need to place this either on an ACL (via setfacl) or by configuring this in my mount point config file (auto.misc) . Has anyone done this before, restrict use of an auto mounted directory?

for my auto.master file I have:

$ cat /etc/auto.master
/pLogs /etc/auto.pLogs

$ cat /etc/auto.pLogs
asample -fstype=nfs,ro,noserverino,gid=505,soft,credentials=/etc/logs.cred

In the above, I'm trying to set the group ownership/permissions to group 505. This is not working however. Does anyone know what I maybe doing wrong?

ps. this isn't a big deal, just wondering if its possible

Hi there,

Yes it is possible. What you need to do is instead of using the default /misc directory use a collaboration directory or what we called a share directory. Here are the steps that you can use:

1. Create a group using groupadd. Ex: groupadd shared
2. Add the user to that group using the following command: usermod -G group_name username
3. Change the ownership of that directory using following command: chown nobody.shared /directory_path
4. Change the permission on the directory using chmod as follows: chmod 2770 /directory_path
5. Create a new file in /etc or any location say, I am creating file in /etc for example: vi /etc/auto.restricted
6. Put the following in /etc/auto.restricted file: mountpointname <put a tab> -fstype=ext3 <put a tab> Directory_location_on_the_remote_server. So this can come down as follow:

7. Edit auto.master file and add the following line just below /misc line: /location_on_local_server_where_to_mount <put a tab> /etc/auto.restricted --timeout=60. So it will come down as follows:

Here we are instructing the automounter that directory via autofs will mount under the shared directory and use /etc/auto.restricted to get the mounting information.

I hope this helps

T3RM1NVTOR- That worked perfectly!
I didn't need to change my auto.pLogs file because all my mounting info was already written in (above).
I didn't realize that by just changing the owner's permission (chown); in particular the GROUP, that I could restrict access w/o using ACL.

Thanks again!

Great!!! Good to hear that. Am glad that you found it helpful.

Please mark the thread as solved.