Re: Lock out root writes on mounted directory?

As someone else suggested, look at the output of "mount"


--- "Eric \"Shubes\"" <plug@shubes.net> wrote:

> It appears to be set in /etc/mtab. Any other way to tell? When I test,
> though, I'm able to delete files.
>
> Kenneth wrote:
> > I agree access control might do it, but it would be cumbersome. Are you
> sure
> > you're getting the ro option set? I know people who specifically keep
> root,
> > /usr, etc mounted ro, I don't think root should be able to write to them.
> >
> > --- Mike Schwartz <mike.l.schwartz@gmail.com> wrote:
> >
> >> On 9/8/06, Eric Shubes <plug@shubes.net> wrote:
> >>> I've created a sandbox for building rpms. It was suggested to me that
> for
> >>> some directories, such as /bin, /lib, /sbin, I could mount them with
> >>> ro,bind
> >>> options instead of coping or hard linking them. What I've discovered,
> >>> though, is that the ro mount option does not prohibit root from
> modifying
> >>> a
> >>> mounted directory. Is there any way to mount a directory such that root
> >>> cannot write to it?
> >>> --
> >>> -Eric 'shubes'
> >>> ---------------------------------------------------
> >>>
> >> I could be way off base here,
> >> but have you looked in to access control lists?
> >> I think I read somewhere that FC4 or so,
> >> has an implementation of them
> >> that is comparable to the "ACL" functionality
> >> in some other OS's.
> >> --
> >> Mike Schwartz
> >> Glendale AZ
> >> schwartz@acm.org
> >> Mike.L.Schwartz@gmail.com
>
>
> --
> -Eric 'shubes'
> ---------------------------------------------------
> PLUG-discuss mailing list - PLUG-discuss@lists.plug.phoenix.az.us
> To subscribe, unsubscribe, or to change you mail settings:
> http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss
>


__________________________________________________
Do You Yahoo!?
Tired of spam? Yahoo! Mail has the best spam protection around
http://mail.yahoo.com
---------------------------------------------------
PLUG-discuss mailing list - PLUG-discuss@lists.plug.phoenix.az.us
To subscribe, unsubscribe, or to change you mail settings:
http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss