How do I deny user to mount floppy, cdrom and usbstick ?
Paul Howarth
paul at city-fan.org
Wed Feb 9 15:54:25 UTC 2005
H. Streit wrote:
> hm, maybe I'm just being a bit of a joykill, but if you don't want them
> to mount floppys, cdroms, and usbsticks, (and if they're not supposed to
> be mounting anything at all) couldn't you just
> root at localhost# chown root.root `which mount` && \
> chmod go-rwx `which mount`
> And be done with it?
> Also, if the floppy, cdrom, and usbstick devices all belong to
> respective groups, couldn't you just rip the users out of the groups in
> the /etc/group file?
Matt's right; physical security is essential. Otherwise anyone could
stick in a Knoppix CD and use whatever devices they liked to their
heart's content.
Paul.
More information about the fedora-list
mailing list