Re: Udisks and/or polkit problems

2012-05-07 Thread David Zeuthen
Hi, On Mon, May 7, 2012 at 6:47 PM, Kevin Chadwick wrote: > That would still allow the user davidz to unmount /boot / etc.. Sure - there's no way for udisks to tell them apart. > That's not something that fits into my security policy? Well, if you have such needs, then perhaps you shouldn't be

Re: Udisks and/or polkit problems

2012-05-07 Thread Kevin Chadwick
On Mon, 7 May 2012 17:57:30 -0400 David Zeuthen wrote: > after of course putting in your own username in the Identity key. > That's all there is to it. > That would still allow the user davidz to unmount /boot / etc.. That's not something that fits into my security policy? > >, it's > > asking

Re: Udisks and/or polkit problems

2012-05-07 Thread David Zeuthen
On Mon, May 7, 2012 at 10:34 AM, Kevin Chadwick wrote: > I decided, that features gone, and after editing three files (two > ineffectual), polkit is atleast unmounting, but before I could look at > what that actually means in terms of what can be unmounted and > restricting that to certain devices

Re: Udisks and/or polkit problems

2012-05-07 Thread Kevin Chadwick
On Mon, 7 May 2012 15:34:52 +0100 Kevin Chadwick wrote: > 1./ Why would udisks want modify after safely remove via nautilus or > thunar. I'm guessing that's to say unmounted correctly and no fsck needed? How do I preclude all the other permissions that I assume modify grants like newfs?

Udisks and/or polkit problems

2012-05-07 Thread Kevin Chadwick
I have created my own udev rules and scripts adding the following functionalities that were missing at the time of design atleast. Works with read-only root. Allows custom mount options for any filesystem type. Automounts any usb plugged in with only udev as a dependency to mount locations such as