I maintain some servers via VNC (over my internal network, firewall
rules prevent remote connections).
In the past, I would VNC in as root and I had all the control I needed.
I am trying to get away from root over VNC. I discovered that a user
account cannot mount a USB drive, no permissions.
This is true for a USB stick, USB connected HD, and a USB connected CD
burner (K3b does not even see the drive).
I am assuming this is an SELinux feature. I want the user I have set up
for VNC access (that is also in the Wheel group) to be able to perform
this function. I don't want to have to command line sudo mount, nor can
I figure out what k3b would need.
I have been googling this problem for a few days, but either my search
foo is weak (nothing new there), or there is really no information out
there on this.
So if this IS an SELinux feature, can someone help me with what I would
need as a policy rule?
Oh, right now I am doing this for Fedora 29-armfhp beta. I will also be
doing it for Centos7-armfhp.
thanks
_______________________________________________
selinux mailing list -- selinux@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to selinux-leave@xxxxxxxxxxxxxxxxxxxxxxx
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/selinux@xxxxxxxxxxxxxxxxxxxxxxx
