[no subject]

> The permissions of the covered mount point usually only come into play
> when accessing ".." from the root of the mounted fs.
> 
> This is true for Unix and BSD ... but I have never looked at this part 
> of the Linux sources.
> 
> As a normal user try to
> 	cd /mnt/memstick  #OK
> 	pwd               #Fails unless cached by shell
> 	ls ..             #Should fail
> 
> with /mnt/memstick permission set to 700 and user root.

I don't agree, note the following, all done as a normal user:

/home/esoteric> cd /mnt/memstick
ksh: cd: /mnt/memstick - Permission denied

rhws/home/esoteric> ls -l /mnt/memstick
ls: /mnt/memstick: Permission denied

rhws/home/esoteric> ls -ld /mnt/memstick
drwx------    2 root     root         4096 May 12 13:59 /mnt/memstick

rhws/home/esoteric> cd /mnt/memstick
ksh: cd: /mnt/memstick - Permission denied

rhws/home/esoteric> mount /mnt/memstick

rhws/home/esoteric> cd /mnt/memstick

rhws/mnt/memstick> pwd
/mnt/memstick

rhws/mnt/memstick> ls ..
cdrom  floppy  jump  memstick

So, I don't believe your point above is valid.

> It is not really necessary to have matching permissions - but the wrong set
> of permissions can cause interesting problems in a production environment.

If the mount options are correct, the permissions on the mount point do 
not matter.  I set the perms on /mnt/memstick to 000 as root:

d---------    2 root     root         4096 May 12 13:59 /mnt/memstick

I can still mount the partition as a normal user.  When I do, the perms are:

drwxr-xr-x    3 esoteric users       16384 Dec 31  1969 /mnt/memstick

-- 
Until later, Geoffrey                     Registered Linux User #108567
Building secure systems in spite of Microsoft


</pre>
<!--X-Body-of-Message-End-->
<!--X-MsgBody-End-->
<!--X-Follow-Ups-->
<hr>
<ul><li><strong>Follow-Ups</strong>:
<ul>
<li><strong><a name="00693" href="msg00693.html">[ale] Permission hell question</a></strong>
<ul><li><em>From:</em> dhurst at kennesaw.edu (Dow Hurst)</li></ul></li>
<li><strong><a name="00694" href="msg00694.html">[ale] Permission hell question</a></strong>
<ul><li><em>From:</em> dhurst at kennesaw.edu (Dow Hurst)</li></ul></li>
<li><strong><a name="00698" href="msg00698.html">[ale] Permission hell question</a></strong>
<ul><li><em>From:</em> ups at tree.com (Stephan Uphoff)</li></ul></li>
</ul></li></ul>
<!--X-Follow-Ups-End-->
<!--X-References-->
<ul><li><strong>References</strong>:
<ul>
<li><strong><a name="00688" href="msg00688.html">[ale] Permission hell question</a></strong>
<ul><li><em>From:</em> ups at tree.com (Stephan Uphoff)</li></ul></li>
</ul></li></ul>
<!--X-References-End-->
<!--X-BotPNI-->
<ul>
<li>Prev by Date:
<strong><a href="msg00688.html">[ale] Permission hell question</a></strong>
</li>
<li>Next by Date:
<strong><a href="msg00690.html">[ale] Permission hell question</a></strong>
</li>
<li>Previous by thread:
<strong><a href="msg00688.html">[ale] Permission hell question</a></strong>
</li>
<li>Next by thread:
<strong><a href="msg00693.html">[ale] Permission hell question</a></strong>
</li>
<li>Index(es):
<ul>
<li><a href="maillist.html#00689"><strong>Date</strong></a></li>
<li><a href="threads.html#00689"><strong>Thread</strong></a></li>
</ul>
</li>
</ul>

<!--X-BotPNI-End-->
<!--X-User-Footer-->
<!--X-User-Footer-End-->
</body>
</html>