Subject: Re: Need some advice regarding portable user IDs
To: None <wsanchez@apple.com>
From: Michael C. Richardson <mcr@sandelman.ottawa.on.ca>
List: tech-userlevel
Date: 08/18/1999 08:18:50
>>>>> "Wilfredo" == Wilfredo Sanchez <wsanchez@apple.com> writes:
    Wilfredo>   I think the desired behaviour would be that since this is  
    Wilfredo> effectively now Joe's zip disk, he should be able to do as he  
    Wilfredo> pleases.  One proposal might be to give the console user the  
    Wilfredo> equivalent of root's priveledges on any removeable media he inserts  

  Right now, with MSDOS floppies, with no userids, the user owning the
mount point gets his userid applied to the entire disk. This allows me to
mount my floppies, etc. on mount points that I own, and I own all
the resulting files. I think you want the same thing as an option for 
UFS mounts.

    Wilfredo> Presumably the console user is the one fiddling with the external  
    Wilfredo> media.

  I don't think this is entirely true, and isn't a useful or enforceable
restriction. 

    Wilfredo>   As another example, a similar situation often comes up on the net  
    Wilfredo> with tar files containing UIDs and GIDs other than zero.

  Only with SYSV chown semantics that allow non-root to make files not
owned by them.

    Wilfredo>   So perhaps there needs to be a way to mark a drive as local  
    Wilfredo> (perhaps with a host ID of some sort?) and noticing when a volume is  
    Wilfredo> "foreign" that you need to do something special.  Certainly you might  
    Wilfredo> want to ignore setuid bits, for starters.  This could simply be  
    Wilfredo> something like fstab, which lists the local drives, and everything  
    Wilfredo> else isn't considered local.

  This is solved by having the "nouid" or somesuch thing add to /etc/fstab
by the admin who knows which ones should be trusted. Linux provides "user"
to get the behaviour that we get for free.

    Wilfredo>   Has anyone dived into this area already and have some experience  
    Wilfredo> with it?  It's confusing me pretty good.

  See what AT&T did with RFS. This may be a negative example (i.e. don't do
this).

   :!mcr!:            |  Cow#1: Are you worried about getting Mad Cow Disease?
   Michael Richardson |  Cow#2: No. I'm a duck.
 Home: mcr@sandelman.ottawa.on.ca. PGP key available.