I have a system, I want only my sudoer account to show and automount NTFS partitions under 'Places' in Ubuntu. Simply, they shall not have access to mount it. Only my main sudoer user account shall take advantage on this show-and-possibly-automount feature of GNOME, but not anyone else.
View 6 RepliesI am stuck in a weird situation and could definitely use some help from gurus in security area.
I have categorized my users into 3:
1. root user
2. other local users
3. LDAP users
I want to setup following 2 usecases:
a)
1. Allow keybased ssh and scp to root users
2. Allow ssh but disallow scp service to other local users
3. Disallow ssh and scp to LDAP users
b)
1. Allow keybased ssh and scp to root users
2. Disallow both ssh and scp to other local users
3. Disallow ssh but allow scp to LDAP users
For the 1. in both cases, I think PermitRootLogin in sshd_config could . For the 3. I am thinking of deploying rssh to control scp service access, since ssh will be restricted anyways.
Problem area is 2. primarily.
i) How to allow ssh but disallow scp to 'other local users'
ii) How to disallow both ssh and scp to 'other local users'
In Nautilus I select a directory on local NTFS volume. I'm logged in as root, right-click > Properties > Permissions and I set "Others" to "none". But it doesn't work. I want my friends & visitors to use and enjoy Ubuntu but without access to my NTFS volumes.
View 9 Replies View RelatedI don't know if this is possible... I want that only some of a Windows Domain(Samba) users can to logging in a machine.For example: The user Peter of the domain WORKSPACE can connect to the PC1, but the user Charly of the domain WORKSPACE can not connect to the PC1. How I can implement this?
View 5 Replies View RelatedI'm using Ubuntu x64 (dunno which version, but I don't think it matters) and I'm concerned about security with PHP.I remember using lighttpd and I had some mystic configuration and the secuirty was perfect for me - if one website gets hacked then the others are still safe (kinda).Now with apache2 if I enable safemode I'm still able to go outside web directory and actually I can go really far untill user/group matches.I tested the system with r57shell and I was able to mess up other websites.Is there a way to disallow access to other websites?
View 5 Replies View Relatedtrying to devise a new sudoers configuration while building a new SOE and would like to force everyone (including system administrators) to use rootsh in favour of doing things like sudo -s, sudo bash, sudo tcsh and so forth. Effectively, use sudo to use any shell other than rootsh. Is there a way to allow users to run anything they want except shells. I realise this is a default permit which inherently is defective, but I'm not convinced that going through the 1559 executable commands of my (as yet incomplete) built system to decided on the likely 1000+ commands I would want to be genuinely allowed. As I said this is for system administrators first, and I'd like to forcibly instil the habit of sudo <command> or using rootsh to get an audited shell. But I know people are already not doing enough sudo <command> as it stands, rather they switch to bash.
View 7 Replies View RelatedJust installed 11.3 on my computer, however when I connect an external NTFS harddisk I receive an error message. When I open dolphin to connect to an internal NTFS partition I receive the message:
org.freedesktop.Hal.Device.PermissionDeniedByPolicy: org. freedesktop.hal.storage.mount-fixed auth_admin_keep_always <--
Anyone having an idea how I can fix this?
I have installed Debian through the Debootstrap process using the ext4 fs for root and it worked without a problem. When I tried to install Debian mounted on btrfs subvolumes, there are problems mounting root while booting so it crashes... Any clue if Debian supports btrfs subvolumes?
View 5 Replies View RelatedThere are a couple of way to mount Samba shares, but I prefer using "autofs" which can mount them on the fly. Use the autofs daemon to have shares automatically mounted on demand. The netfs service (installed by default in Fedora) is not a daemon and can only mount shares on boot, (it can't mount them on demand).
* Install the autofs package:
Code:
yum install autofs * Edit /etc/auto.master (the master map file), and comment out all lines (with #). This avoids conflicts with the CDROM (which is handled by Gnome), etc. Save the file. * Create a new file /etc/auto.cifs, with the contents of:
Code:
#!/bin/bash
# $Id$
[Code]...
On a clean install of Arch linux I edited fstab to be like so :
Code:
/dev/disk/by-id/usb-Hitachi_HTS543232L9A300_9002555dd84a21024b000000-0:0-part1 /media/EXT ntfs-3g user,rw,uid=mas,gid=users,noauto 0 0
I tried ntfs and ntfs-3g but the result is the same I can mount root but I would like to be able to mount as a user. When I try to mount as a user I get
Code:
Unprivileged user can not mount NTFS block devices using the external FUSE library. Either mount the volume as root, or rebuild NTFS-3G with integrated FUSE support and make it setuid root. Please see more information at [URL] Before installing ntfs-3g I was able to mount as a user but there was no rw permission. Any way to mount an ntfs partition as a user without suid as the message said?
I've made 2 ntfs volumes by mkntfs. First one is a primary partition on usb hard drive and second is a logical partition on system hard drive. I used default cluster and sector sizes in mkntfs. Under Linux these partitions are mountable by ntfs-3g, readable and writable. But fdisk doesn't recognize their filesystem type. It recognizes that as "Linux". WinXP x64 also can't recognize filesystem type of these partitions. Why windows can't work with these partitions?
View 2 Replies View RelatedI'm using fedora core 9 and I am a linux beginner. In my computer, I can see the icons representing windows partitions but cannot be opened. I right click on it and then opt for "mount the volume" . But there is no use. What can I do?
View 2 Replies View RelatedI have a setup that looks like this
[Code]....
and I'm dumped into recovery mode. However, if I remove these mounts from /etc/fstab via comments, I can wait for the system to boot (which it does very quickly) then mount the mapper devices myself. So what is going on? Has something changed wrt logical volumes, or is this just systemd? I can live with manual mounting, but any advice on resolving the automatic mounting situation would be great.
[Code]....
How to access Windows volumes from non-root users?
View 4 Replies View RelatedI have two NTFS volumes I want to automount at boot. I can't get my user account to mount them in Fedora 10. I keep getting the message that the two lines I have edited in fstab are bad. The volumes are sda2 and sda8, and the volume names are SPACELAB and Spaceman. I also need to be able to mount an NTFS usb drive from time to time. I am getting frustrated, so I have posted my fstab file below,
#
# /etc/fstab
# Created by anaconda on Sun Mar 1 12:44:11 2009
#
[code]....
I'm just wondering - what is the best way to set up your encrypted volumes with dm_crypt and LUKS?
My understanding was that aes-lrw ws better than aes-cbc - and then I stumble upon [url] which says that LRW has some problems, and XTS is better? I dont know enough about encryption theory to be able to say anything, so i'm hoping some folks more enlightened will be able to say something here.
I was previously using aes-lrw-benbi to set up a volume. If xts is truly better - should i be using '-c aes-xts-benbi' then?
I'm running 10.04 running daily updates. A couple days back, I saw an update related to mounting volumes. Not sure if this is what broke my system, but might be. When attempting to mount a partition from nautilus, I get a message saying I do not have authorization. It does not even ask for my password, just fails. I tried running updates and this asks for my password and accepts it fine. I opened disk utility from the menus and tried to mount the volume from there but also got the same permission denied, not authorized without even being asked for my password.
I then ran gksu palimpsest. I was asked for my password and was able to mount and unmount partitions from there. However, when mounted, my applications and nautilus cannot access the data in the partitions mounted using gksu palimpsest. In nautilus, I can navigate to /media/Data (the partition in question) but I get "THE FOLDER CONTENTS CANNOT BE DISPLAYED You do not have the permissions necessary to view the contents of "Data"." When I open nautilus via gksu in the terminal, I do have full access to the partitions.
How do I get my privileges back for my user account. I am the only user on the computer, and I have never set up a root account since my upgrade to 10.04 months ago. I tried of course the Administration->Users and Groups menu, but I am not permitted to change the account type or open advanced settings. I click the button, but nothing happens, not even a password request. Running gksu admin-settings on the terminal allows me access. My current settings are attached.
I'm not a mathematician or cryptographer, only an end user of the technology trying to determine the "best" or safest future proof option to go with for long term archival while also maintaining reasonable performance with dual opteron ~2GHz or similar setup. I've noticed aes-cbc-essiv seems to be the default choice in various installers for reasons of backwards compatibility while others are moving towards XTS since the standardization.
View 1 Replies View RelatedTrueCrypt hidden volume plausible deniability is documented at [URl]deniability but how plausible is it? there is no sign of the hidden volume's existence within the outer volume even if the user is forced to disclose the outer volume password. For this to be plausible the outer volume must be used or the user has no plausible reason for having it.
Quote:
If you mount a TrueCrypt volume within which there is a hidden volume, you may read data stored on the (outer) volume without any risk. However, if you (or the operating system) need to save data to the outer volume, there is a risk that the hidden volume will get damaged (overwritten). To prevent this, you should protect the hidden volume in a way described in this section.
The way described results in the outer volume properties including 'Hidden volume protected: Yes' which discloses the hidden volume's existence. The next section in the documentation has a diagram showing how the hidden volume is created at the top end of the outer volume space. Use of the outer volume must not write in the hidden volume space or the hidden volume will be corrupted. That limits the choice of outer volume file system to one of the FAT series because more sophisticated file systems do write in places across their whole space.How plausible is the choice of a FAT file system on Linux? Even on a dual boot system with the usual Windows versions NTFS is a better choice.
We are trying to set up a classroom training environment where our SIG can hold classes for prospective converts from Microsoft/Mac. The ten machines will have /home/student01..10 and /home/linsig01..10 as users. We want /home/student01 to be able to explore and sudo so they can learn to administer their personal machines at home. We don't want them to be able to modify (sudo) /home/linsig01. I've seen the tutorial on Access Control Lists but I'd like other input so we get it right the first time.
View 3 Replies View RelatedI have both windows and ubuntu 11.04. In ubuntu I can mount then edit NTFS drive without being asked for permission. It's not safe that way because anyone using my computer can edit my windows files. How do I make it ask for password when mounting NTFS?
View 2 Replies View RelatedI am trying to mount 3 NTFS partitions, but they aren't showing up in the /dev directory. If I fdisk the drive, the partition shows up, but nothing in /dev...
Here is the output of fdisk -l as well as the results of my attempt to mount the partition.
Error mounting: mount exited with exit code 1: helper failed with: mount: according to mtab, /dev/sdc1 is already mounted on / mount failed. Not sure what happened but it worked fine till last reboot. It's a 250g NTFS drive named MEDIA device /dev/sda1. why it won't mount now.
View 4 Replies View RelatedI used Wubi to install Ubuntu 10.10 onto my laptop alongside Windows 7. I need to access my windows harddrive, however, so I used NTFS Configuration Tool to mount the drive. However, whenever I reboot, it fails to mount and I actually have to go back into NTFS Config Tool, delete the old mount, and remount it. This is tedious. My /etc/fbstab file looks as follows:
[code]...
I have successfully mounted the NTFS partition containing win7 via Ubuntu.
I followed these 3 steps:
Code:
Now I have unmounted the partition and want to remount it again except this time so that it is mounted as Read-Only.
I am running 11.4 from a thumb drive,mainly because something is fishy with my main hard drive, but installation is not my reason for this thread (though I think fixing one problem will remedy the other). My winbloze install is short stroked with ~50gb for OS and ~200gb for media storage. I have no problem accessing the storage from windows, but I am unable to mount the storage partition under Ubuntu. I get the following error:
Error mounting: mount exited with exit code 14: Hibernated non-system partition, refused to mount.
Failed to mount '/dev/sda2': Operation not permitted
The NTFS partition is hibernated. Please resume and shutdown Windows properly, or mount the volume read-only with the 'ro' mount option, or
mount the volume read-write with the 'remove_hiberfile' mount option.
For example type on the command line:
mount -t ntfs-3g -o remove_hiberfile /dev/sda2 /media/Laptop Storage
When I run that command, I get this:
su: invalid option -- 't'
How to get a NTFS external drive to mount in Ubuntu.
View 9 Replies View RelatedI have two HDD in my computer and one is in NTFS which in linux it show up and the name is sdb1 and when I try to get it to mount the drive it give me the following error at the bottom of the screen:
hal-storage-fixed-mount-all-options refused uid 1000
I have reformatted my hard drive with allocation size 64K for a better performance on my WDTV HD media player(dealing with large files). When I mount this drive on Linux, the mount tells me that "blksize=4096".If I keep writing files usinghis default etting(blksize=4096) to my NTFS formatted hard drive, will my WDTV be able to benefit from the performance improvement of 64k allocation size ? Should I try and mount my hard drive with a larger blksize ?I did some research on google but couldn't find an option to increase the blksize when mounting an NTFS pre-formatted drive.
View 1 Replies View RelatedIs it possible to use the 'discard' option when mounting an ntfs-partition? Because I'm buying an ssd and I intend to dual-boot windows xp (which doesn't support TRIM) and Ubuntu 10.10 (which does).
View 3 Replies View Related