[CentOS] why does automounting removable media always have options nodev, noexec, nosuid?

Dave tdbtdb+centos at gmail.com
Wed Sep 15 20:26:12 UTC 2010


On Wed, Sep 15, 2010 at 9:09 AM, Robert P. J. Day <rpjday at crashcourse.ca>wrote:

>
>  i'm experimenting with some basic removable media mounting
> exercises for an upcoming class, and i read that, while you can use
> gconf-editor to change some of the mount options in cases like that,
> there is no way to override the mount options of nodev, noexec and
> nosuid.  for example, that claim is made here (admittedly for fedora,
> but it appears to be true for centos as well):
>
>  http://scrolls.mafgani.net/2007/03/gnome-automount-options/
>
> is there somewhere that one could see and verify that those options
> always hold for mountable filesystems on removable media?  thanks.
>

This question is different from the one in your subject header. These mount
options are 'security features', make crackers jump through another hoop.
They can be undone with a mount -o remount. I don't know the answer to your
second question about where the defaults are set/displayed.
TDB
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.centos.org/pipermail/centos/attachments/20100915/0d26d3f5/attachment.html>


More information about the CentOS mailing list