[Bug 173345] Review Request: fuse

[bugzilla at redhat.com]

Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug report.

Summary: Review Request: fuse


https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=173345





------- Additional Comments From fedora at leemhuis.info  2005-11-17 06:20 EST -------
(In reply to comment #7)
> I my view the fuse group is too restrictive.

Several other people say: Shipping programms suid root is a security risk -- we
have seen that in the past with several programms and therefor avoid suid root
as much as possible. 

I agree with that opinion. But fuse simply does not work without suid root
(note: smbfs, cifs, ncpfs and several other do). So the fuse group is a compromise.

> I potentally want any user to mount
> a USB stick in a LTSP environment.

Interesting environment where users have direct access to physical devices. And
mounting a USB-Stick works for me on recent Fedora versions without fuse. But
that is a diffenrent story. So back on topic:

> I don't want to add users to a group, I want
> anyone to be able to do this.[...] 
> I want to trust to security of the fuse userland tools.

Then do a chmod 0755 /usr/bin/fusemount. You are free to do that, I won't complain.

-- 
Configure bugmail: https://bugzilla.redhat.com/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.