Re: [PATCH] Add a --mode option to chmod the mount point of the maps

["Cyril B." <cbay@excellency.fr>]

Ian Kent wrote:
> On Sun, 2015-09-13 at 15:56 +0200, Cyril B. wrote:
>> It looks like the mount point of the maps have fixed permissions, 755. I
>> need to have different permissions: in my use case, I want /home (which
>> is handled by autofs) to be set to 751.
>
> Why is this needed?

Why do I want to set /home to 751? When it was set to 755, I frequently 
had users believing there was a serious vulnerability because they could 
list /home. Stupid, I know, but setting the permissions to 751 was a 
trivial solution for this.

>> The initial permissions of /home are overwritten when autofs is started,
>> so changing those doesn't help.
>
> They aren't overwritten.
> The permissions are those of the autofs mount that is mounted
> over /home.

I'm not sure I'm following you. Here's my auto.master:

/home program:/etc/auto.home

Before launching autofs, permissions are set to 751:

# ls -ald /home
drwxr-x--x 2 root root 4096 Aug  7 11:09 /home

Once I've launched autofs, permissions are reset to 755:

# ls -ald /home
drwxr-xr-x 2 root root 0 Sep 14 10:32 /home

And when I quit autofs, my permissions are back to 751:

# ls -ald /home
drwxr-x--x 2 root root 4096 Aug  7 11:09 /home

What I want is to always have /home permissions set to 751.

Note that I'm not talking about mount points below /home (e.g. 
/home/foobar), those do have the correct permissions.

-- 
Cyril B.
--
To unsubscribe from this list: send the line "unsubscribe autofs" in