Re: [PATCH] Add a --mode option to chmod the mount point of the maps

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Ian Kent wrote:
On Sun, 2015-09-13 at 15:56 +0200, Cyril B. wrote:
It looks like the mount point of the maps have fixed permissions, 755. I
need to have different permissions: in my use case, I want /home (which
is handled by autofs) to be set to 751.

Why is this needed?

Why do I want to set /home to 751? When it was set to 755, I frequently had users believing there was a serious vulnerability because they could list /home. Stupid, I know, but setting the permissions to 751 was a trivial solution for this.

The initial permissions of /home are overwritten when autofs is started,
so changing those doesn't help.

They aren't overwritten.
The permissions are those of the autofs mount that is mounted
over /home.

I'm not sure I'm following you. Here's my auto.master:

/home program:/etc/auto.home

Before launching autofs, permissions are set to 751:

# ls -ald /home
drwxr-x--x 2 root root 4096 Aug  7 11:09 /home

Once I've launched autofs, permissions are reset to 755:

# ls -ald /home
drwxr-xr-x 2 root root 0 Sep 14 10:32 /home

And when I quit autofs, my permissions are back to 751:

# ls -ald /home
drwxr-x--x 2 root root 4096 Aug  7 11:09 /home

What I want is to always have /home permissions set to 751.

Note that I'm not talking about mount points below /home (e.g. /home/foobar), those do have the correct permissions.

--
Cyril B.
--
To unsubscribe from this list: send the line "unsubscribe autofs" in



[Index of Archives]     [Linux Filesystem Development]     [Linux Ext4]     [Linux ARM Kernel]     [Linux ARM]     [Linux Omap]     [Fedora ARM]     [IETF Annouce]     [Security]     [Bugtraq]     [Linux]     [Linux OMAP]     [Linux MIPS]     [ECOS]     [Asterisk Internet PBX]     [Linux API]

  Powered by Linux