mount - How can I grant read-only acces to my harddrive to guest user? - Ask Ubuntu
this question has answer here:
i want allow 'guest' user read files in harddrive (mounted during startup @ '/mnt/blahblahblah' ) . don't want them write it.i'm on xubuntu 16.04. how can it?
guest sessions locked down using apparmor, uses long list of special permissions keep guest users touching anything. these accessed etc/apparmor.d/lightdm-guest-session
.
on machine, file looks this:
# profile restricting lightdm guest session #include <tunables/global> /usr/lib/lightdm/lightdm-guest-session { # applications confined via main abstraction #include <abstractions/lightdm> # chromium-browser needs special confinement due sandboxing #include <abstractions/lightdm_chromium-browser> }
opening "main abstraction" (etc/apparmor.d/abstractions/lightdm
) gives more interesting:
... / r, /bin/ rmix, /bin/fusermount px, /bin/** rmix, /cdrom/ rmix, /cdrom/** rmix, /dev/ r, /dev/** rmw, # audio devices etc. owner /dev/shm/** rmw, /etc/ r, /etc/** rmk, ...
these directories restricted session can access, along permissions. if add hard drive list (with trailing /**
include sub-folders, , r
read permission), future guest sessions have read-only access it.
Comments
Post a Comment