James D. Parra wrote:
-----Original Message----- From: David C. Rankin [mailto:drankinatty@suddenlinkmail.com] WARNING, WARNING, the use of ,noperm will give root access to all cifs mounted shares mounted with the ,noperm options. A stray chmod -R or the like above the mount point will work all the way down the mounted client as well... ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Thanks David. So what is a better way to mount with cifs, instead of resorting back to smbfs? Use noacl and not noperm?
Best regards,
~James
James, That is an excellent question, to which, I'll give a very straight forward answer. "I don't know." Since all I have to worry about is windows users, that question doesn't hit me from a user perspective. Of course, I use cifs extensively for myself, but I do use the ,noperm. That's how I found out that a stray recursive command above the mount point can really screw up the entire mounted drive. I just use brief scripts to mount drives and use .bashrc to do it. There is no reason you couldn't have them execute on user login. The script I use is: #!/bin/bash device="/mnt/nirvana-cfg" if mount | grep -q "on ${device} type"; then echo "${device} already mounted" else mount.cifs //nirvana/config /mnt/nirvana-cfg/ -o username=david,uid=1000,password=yourpassword,noperm fi device="/mnt/nirvana" if mount | grep -q "on ${device} type"; then echo "${device} already mounted" else mount.cifs //nirvana/samba /mnt/nirvana/ -o username=david,uid=1000,password=yourpassword,noperm fi device="/mnt/nirvana-david" if mount | grep -q "on ${device} type"; then echo "${device} already mounted" else mount.cifs //nirvana/david /mnt/nirvana-david/ -o username=david,uid=1000,password=yourpassword,noperm fi exit 0 You can remove the noperm and still get access that provides better protection against an accidental stray command. Fortunately, that is as far as I have had to dive into the mess. -- David C. Rankin, J.D., P.E. Rankin Law Firm, PLLC 510 Ochiltree Street Nacogdoches, Texas 75961 Telephone: (936) 715-9333 Facsimile: (936) 715-9339 www.rankinlawfirm.com -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org