Re: [Pan-users] Re: Save attachment file permissions

[walt]

Paul Crawford wrote:
> walt wrote:

> > Anyway, you probably want to look into how to configure the hald
> > system, which you can do using the command-line utilities packaged
> > with hal. You probably already have hal installed, so just try
> > typing hal-device at a command prompt and see what happens.
>
> A quick trial showed nothing that pointed to an easy solution :(

Heh.  Easy no, possible yes.

From /usr/share/hal/fdi/policy/10osvendor/20-storage-methods:

        <!-- allow these mount options for all file systems -->
        <match 
key="/org/freedesktop/Hal/devices/computer:system.kernel.name" 
string="Linux">
          <append key="volume.mount.valid_options" 
type="strlist">ro</append>
          <append key="volume.mount.valid_options" 
type="strlist">sync</append>
          <append key="volume.mount.valid_options" 
type="strlist">dirsync</append>
          <append key="volume.mount.valid_options" 
type="strlist">noatime</append>
          <append key="volume.mount.valid_options" 
type="strlist">nodiratime</append>
          <append key="volume.mount.valid_options" 
type="strlist">noexec</append>       <=================== look

And there are more options suitable for fat filesystems, which
is the default for usb sticks.

You are rightly concerned about the security holes you mentioned,
so better to spend an hour or two now learning how to use hal
than to spend countless hours fixing messes after they happen,
yes?

If I knew how to do it I'd happily explain it to you -- but
I'm hoping you'll explain it to me sometime :o)