Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.user > #175899

Re: Preventing ACL on cdrom drive...

Show all headers | View raw

[Multipart message — attachments visible in raw view] - view raw

On Fri, 2016-12-23 at 23:16 +0100, Thomas Schmitt wrote:

> Hi,
> 
> Nimrod wrote:
> > I see a "----+" in your permission. What is that, and how could I get it too?
> 
> It indicates that there is a non-trivial ACL and that it is worth to run
> program getfacl to see all permissions.
> 
>   $ getfacl /dev/sr0
>   getfacl: Removing leading '/' from absolute path names
>   # file: dev/sr0
>   # owner: root
>   # group: cdrom
>   user::rw-
>   user:<my desktop user name>:rw-
>   group::rw-
>   mask::rw-
>   other::---
> 
> I.e. my desktop user explicitely has rw permission independently of his
> group memberships.
> 
> 
> > > putting them all into group "cdrom".
> 
> > They all are already.
> 
> Consider Pascal Hambourg's theory that only the one can eject who mounted.
> 
> If the automounter (udisks ?) acts on your desktop user's behalf or on
> its own user id, then permissions on the device file might be not enough
> to operate it.
> 
> In this case you need to get your automounter under control.
> 
> 
> > sometimes I'm even prompted for
> > password to eject a CD I myself put into the drive!
> 
> What happens if the various users perform the command
> 
>   eject /dev/sr0
> 
> in a shell terminal ? Especially the superuser should have success.

Here is what happens when another user issues the "eject" command:

umount: /media/andrea/CDROM: Permission denied
eject: unmount of `/media/andrea/CDROM' failed

As you surely expected, root can eject the cdrom instead.

> 
> Maybe you can enable all your family members to perform
>   sudo eject /dev/sr0
> and provide some icon for this command on the desktop. (I assume family
> does not like shell commands.)
> 

It would work, but that would also be rather unaesthetic. Nevertheless I
will try this approach as a last choice.

> 
> Have a nice day :)
> 
> Thomas
> 

Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Preventing ACL on cdrom drive... Nimrod <nimrod@virgilio.it> - 2016-12-23 19:10 +0100
  Re: Preventing ACL on cdrom drive... "Thomas Schmitt" <scdbackup@gmx.net> - 2016-12-23 20:30 +0100
    Re: Preventing ACL on cdrom drive... Nimrod <nimrod@virgilio.it> - 2016-12-23 21:20 +0100
      Re: Preventing ACL on cdrom drive... "Thomas Schmitt" <scdbackup@gmx.net> - 2016-12-23 23:20 +0100
        Re: Preventing ACL on cdrom drive... Nimrod <nimrod@virgilio.it> - 2016-12-23 23:50 +0100
  Re: Preventing ACL on cdrom drive... Pascal Hambourg <pascal@plouf.fr.eu.org> - 2016-12-23 21:00 +0100
    Re: Preventing ACL on cdrom drive... Nimrod <nimrod@virgilio.it> - 2016-12-23 22:50 +0100
  Re: Preventing ACL on cdrom drive... Michael Biebl <biebl@debian.org> - 2016-12-24 05:30 +0100
    Re: Preventing ACL on cdrom drive... Nimrod <nimrod@virgilio.it> - 2016-12-26 17:30 +0100
      Re: Preventing ACL on cdrom drive... Pascal Hambourg <pascal@plouf.fr.eu.org> - 2016-12-26 18:40 +0100
        Re: Preventing ACL on cdrom drive... Nimrod <nimrod@virgilio.it> - 2016-12-26 22:20 +0100
          Re: Preventing ACL on cdrom drive... Nimrod <nimrod@virgilio.it> - 2016-12-28 11:30 +0100
            Re: Preventing ACL on cdrom drive... Pascal Hambourg <pascal@plouf.fr.eu.org> - 2016-12-28 13:50 +0100
              SOLVED Re: Preventing ACL on cdrom drive... Nimrod <nimrod@virgilio.it> - 2017-01-01 19:10 +0100

csiph-web