Re: executables on a encrypted loopback filesystem

From: Hubert Chan (hubert_at_uhoreg.ca)
Date: 05/22/03

Next message: Joe Dupre: "Linux box making ident(?) requests from seqential ports"
Previous message: kawayanan_at_yahoo.com: "executables on a encrypted loopback filesystem"
In reply to: kawayanan_at_yahoo.com: "executables on a encrypted loopback filesystem"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

Date: Thu, 22 May 2003 12:56:45 -0400

>>>>> "kawayanan" == kawayanan <kawayanan@yahoo.com> writes:

[...]

kawayanan> /etc/cryptofile /mnt/crypto ext2
kawayanan> exec,noauto,loop,encryption=AES,user 0 0

From the mount man page:

              user ... ... ... This option implies
                     the options noexec, nosuid, and nodev (unless overridden
                     by subsequent options, as in the option line
                     user,exec,dev,suid).

So you'll have to move the "exec" option after "user".

kawayanan> As a totally seperate question, is there a safe way that I
kawayanan> could allow users to mount a encrypted loopback filesystem
kawayanan> like I am using without listing it in fstab?

Maybe sudo? Possibly an suid script?

-- 
Hubert Chan <hubert@uhoreg.ca> - http://www.uhoreg.ca/
PGP/GnuPG key: 1024D/124B61FA
Fingerprint: 96C5 012F 5F74 A5F7 1FF7  5291 AF29 C719 124B 61FA
Key available at wwwkeys.pgp.net.   Encrypted e-mail preferred.

application/pgp-signature attachment: stored

Next message: Joe Dupre: "Linux box making ident(?) requests from seqential ports"
Previous message: kawayanan_at_yahoo.com: "executables on a encrypted loopback filesystem"
In reply to: kawayanan_at_yahoo.com: "executables on a encrypted loopback filesystem"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]