>However, when you log in to GNOME then gnome-volume-manager, in the >default configuration, mounts all the drives as the user who is logging >in. And unmounts them at logout. I think this is sane given the options >put in /etc/fstab. > > /dev/sda1 /media/compact_flash vfat >rw,sync,noatime,nodiratime,nosuid,nodev,uid=500,gid=500,fmask=0022,dmask=0022 0 0 > >Note the nosuid,nodev options thanks to having user in the fstab line. > >So, I hope we can agree this is pretty safe? The damage comes from xattr. Suppose I have a machine that boots Mandrake, debian, and FC3. I use the /opt as a pass between the the various OS's. It is on its own partition. One of these days, the mount count triggers a fsck. I don't want it to write anything to the drive if it can mess it up. Again, the problem is xattrs and the older OS's not handling them. <rant> Its too late now, but I think allowing xattrs into ext3 was a big mistake from a backwards compatibility stance. It should have been ext4. Sure, the bugs in ext3 would still be there waiting to bite you, but you won't face them every single day.</rant> Can you detect a ext3 drive that doesn't have xattrs applied? If so, the work around is not to write anything related to xattrs to that drive. >I'm not sure how well turning off media detection works presently Something changed after yesterday's updates. I set everything to false yesterday and there were no entries in /media and fstab. Today they are there. >(I test it once in a while though) and I think g-v-m >ignores the automount hint. When Nautilus and GNOME VFS is ready, this >will be supported as well [1]. Then the answer is not to make the drive available. There should probably be a configuration option that says do not update fstab with detected media and another for do not create mount points for detected media. This way, people that cannot afford to get a corrupted partition from xattrs being written to a partition that a NON-SE Linux OS must access can avoid damage. >There is supposed to be a /media/cdrom mount point if you got a CD-ROM drive; OK, I don't see one. The following is from an earlier e-mail to the list that I didn't get a chance to answer: >This should work. What does 'udevinfo -r -q name -p /block/hdc' say? /dev/hdc >Does running 'service haldaemon stop; udevstart; service >haldaemon start' solve your problem? No. [root@buildhost root]# ls /media/ idedisk idedisk1 scsidisk scsidisk1 [root@buildhost root]# service haldaemon stop Stopping HAL daemon: [FAILED] [root@buildhost root]# udevstart [root@buildhost root]# service haldaemon start Starting HAL daemon: [ OK ] /etc/init.d/haldaemon: line 31: /var/run/hald/pid: No such file or directory >Otherwise you need to file a bug against hal to we can fix it Does the above look like a bug? If so I will file one. Thanks, -Steve Grubb __________________________________ Do you Yahoo!? Yahoo! Mail - 50x more storage than other providers! http://promotions.yahoo.com/new_mail