Garrett Mclean wrote:
> I figured it out. It is a matter of changing the default behavior of hal.
> Sure, we don't want hal trying to auto-mount non-removable stuff, but that
> doesn't mean we don't want to view volumes on the desktop. Maybe this could
> be a debconf question? I don't know. Anyway, here's what I added to
> /etc/hal/fdi/policy/preferences.fdi:
> 
> <device>
>  <match key="block.device" string="/dev/hdb1">
>    <merge key="volume.ignore" type="bool">false</merge>
>  </match>
> </device>
> 

This is unfortunately not an appropriate fix. Please see the changelog
of 0.5.8.1-1. We intentionally added
debian-storage-policy-fixed-drives.fdi (installed in
/usr/share/hal/fdi/policy/10osvendor/), which sets volume.ignore="true"
for local devices (non hotpluggable and non removable).
Otherwise anyone who can access org.freedesktop.Hal.Device.Volume
(everyone in group plugdev) can mount/unmount partitions, which is a
major security risk.

The problem is within gnome-vfs and how it presents such
devices/volumes. It should do the following for local devices:

Check if volume.ignore=true (local device), if so:

1.) If the device is mounted and accessible, show it.
2.) If it is not mounted but configured in /etc/fstab with sufficient
rights (user option is set), show it.
3.) If none of the above applies, don't show it.



I CCed the gnome-vfs maintainer (Joss), maybe he can comment on this.


Cheers,
Michael

-- 
Why is it that all of the instruments seeking intelligent life in the
universe are pointed away from Earth?

Attachment: signature.asc
Description: OpenPGP digital signature

Reply via email to