Hi! Henning Makholm [2004-11-09 23:28 +0000]: > Scripsit Paul.Hampson@anu.edu.au (Paul Hampson) > > On Tue, Nov 09, 2004 at 06:41:40PM +0100, Martin Pitt wrote: > > > > We solved (4) by introducing a new group called 'plugdev'. Every user > > > who is a member of this group can access hotpluggable devices (digital > > > cameras, USB drives etc.). pmount can only be executed by members of > > > this group (it is root:plugdev 750), > > This must be be a typo. Surely such a program would need to be suid > root, i.e. mode 4750 was meant rather than 750. Of course, sorry for that. Like mount, pmount of course needs root privileges to actually do the mounting. Paul, this also solves your question: a non-suid pmount cannot do anything useful. Martin -- Martin Pitt http://www.piware.de Ubuntu Developer http://www.ubuntulinux.org Debian GNU/Linux Developer http://www.debian.org
Attachment:
signature.asc
Description: Digital signature