Re: RFC: usermount - a secure mount for unpriviledged users

["Mantas Mikulėnas" <grawity@gmail.com>]

On 2015-11-18 19:17, U.Mutlu wrote:
> Currently no responsible admin can grant permission to the mount pgm
> to his users, because of the dangers inherent with bind-mounting etc.
> 
> I suggest there should be an additional mount program destined for
> unpriviledged users (to be used via sudo).
> 
> It should be a stripped down version of the mount pgm, with only some
> basic options for mounting, but without the dangerous options like
> bind-mount.
> 
> The new program should of course have a different name, for example
> "usermount".
> 
> I think this is the most clean solution to this problem.
> 
> Users are intessted in mounting their own filesystems into
> their own mountpoints, ie. they don't neccesserily need fstab or mtab etc.:
>   $ mkdir mymnt1 mymnt2
>   $ sudo usermount myfs.img ./mymnt1
>   $ sudo usermount my.iso   ./mymnt2

fwiw, udisks2 already lets you mount removable drives and loop devices
under (/run)/media:

  $ udisksctl mount -b /dev/sdb4

  $ udisksctl loop-setup -f ~/foo.img

-- 
Mantas Mikulėnas <grawity@gmail.com>