Allow to mount/unmount a specific device to a specific user

Question

I know I can give permission to use "mount/unmount" through sudo some users without password.

But how can I give permission to use "mount/unmount" only for /dev/sda2 and not for /dev/sda10?

For example, some user can execute: sudo mount -t ntfs /dev/sda2 ~/mnt/ntfs
But the same user must not have permission to execute: sudo mount /dev/sda10 ~/mnt/s10

the sudo command let you become root for a while. So, if you are root, shall be no limitations — feligiotti, Oct 07 '14 at 08:10
@gio900 The point is that one wants to only allow a given user to run a specific command with a specific parameter with root privileges. — fkraiem, Oct 07 '14 at 08:12
ok, so if you let that user to run a script instead the command, thats limitation will be in the script — feligiotti, Oct 07 '14 at 08:14
let's have a look if it's ok: http://www.tldp.org/LDP/abs/html/contributed-scripts.html#USBINST you have to adapt just a bit. — feligiotti, Oct 07 '14 at 08:25
or, better NOPASSWD: http://askubuntu.com/questions/159007/how-do-i-run-specific-sudo-commands-without-a-password — feligiotti, Oct 07 '14 at 08:31
the trick is to do the script, let it executable, then add the location of it and the correct username in the file /etc/sudoers — feligiotti, Oct 07 '14 at 08:39

score 10 · Accepted Answer · answered Oct 07 '14 at 08:23

10

you could create a simple file:

 sudo visudo -f /etc/sudoers.d/myOverrides

with this directive:

 User ALL = NOPASSWD:/sbin/mount -t ntfs /dev/sda2 /home/User/mnt/ntfs

This allow User to runs mount command with those parameter without entering a password.

Here is sudo manual for more details.

answered Oct 07 '14 at 08:23

Lety

6,039
2
29
37

Still problem.
sudo -l: User dmit may run the following commands on mintPC: (ALL : ALL) ALL (root) NOPASSWD: /bin/mount -t ntfs /dev/sda2 /home/dmit/mnt/ntfs /bin/mount -t ntfs /dev/sda2 /home/dmit/mnt/ntfs mount: only root can do that – Dimetry Oct 07 '14 at 12:28
You should run mount with sudo: "sudo mount -t ntfs /dev/sda2 /home/dmit/mnt/ntfs" and this will not ask you for password – Lety Oct 07 '14 at 15:50
You are right. Solved. ty – Dimetry Oct 07 '14 at 15:59

score 0 · Answer 2 · answered Oct 07 '14 at 08:25

0

You can specify arguments in the sudoers file, something like this should work:

user ALL=(ALL) /sbin/mount -t ntfs /dev/sda2 /home/user/mnt/ntfs, /sbin/umount /dev/sda2

answered Oct 07 '14 at 08:25

fkraiem

12,555
4
35
40

Allow to mount/unmount a specific device to a specific user

2 Answers2

Linked