Results 1 to 7 of 7

Thread: Intrepid's Guest Session has access to mounts?

  1. #1
    Join Date
    Jun 2007
    Beans
    602
    Distro
    Ubuntu 9.10 Karmic Koala

    Intrepid's Guest Session has access to mounts?

    I just installed Intrepid (8.10) on my laptop and I went to check out the new "Guest Session" feature which is supposed to be a locked down session, yet as a Guest I was able to access my mounted drives, I could even read, write, delete, and execute files from those mounts also...

    Isn't the "Guest Session" supposed to be secure:
    The User Switcher panel applet (package fast-user-switch-applet) now provides an extra entry for starting a Guest session (by Martin Pitt). This creates a temporary password-less user account with restricted privileges: the account cannot access any users' home directories, nor permanently store data. This is sufficiently safe to lend your laptop to someone else for a quick email check.
    - http://www.ubuntu.com/getubuntu/rele...es/810overview

    Not safe enough IMO
    Ubuntu 12.04 64-bit - IP35-Pro | Q6600@3.3ghz(TRUE [lapped]) | G.Skill 2x2GB | MSI NX8600GT | 150GB WD Raptor ||| NAS - Ubuntu 10.04 - Intel D865GBF | P4 3.0GHz | G.Skill 4x1GB | FX5200-AGP | 3x250GB mdadm Raid5

  2. #2
    Join Date
    May 2007
    Location
    Utah
    Beans
    110
    Distro
    Ubuntu 10.04 Lucid Lynx

    Thumbs up Re: Intrepid's Guest Session has access to mounts?

    I think it depends on the way those mounts are mounted; I cannot access any mounts through the Guest Session unless they were mounted by the user in the Guest Session (i.e. plugging in a flash drive, etc.).

  3. #3
    Join Date
    Jul 2005
    Location
    England
    Beans
    Hidden!

    Re: Intrepid's Guest Session has access to mounts?

    I imagine this will depend on the fstab file which is loaded long before the user gui. You may need to set that file to restrict users to only have whatever limited access you wish to other partitions. Just out of interest, can the guest user also read the user files of the first user, even if guest can't write to them?

    I'm sure there must be a way to get the restricted file access you want quite easily, but can't help further I'm afraid. I have yet to really look at 8.10, just downloaded with ktorrent, which seemed much faster than transmission.

  4. #4
    Join Date
    Apr 2008
    Location
    AZ
    Beans
    2,063
    Distro
    Ubuntu

    Re: Intrepid's Guest Session has access to mounts?

    I dont have a thumbdrive to test, but i would hope that Guests could launch their own apps as well as save data to their thumbdrive using a guest account. Can anyone confirm?

  5. #5
    Join Date
    Sep 2008
    Beans
    30
    Distro
    Ubuntu 9.10 Karmic Koala

    Re: Intrepid's Guest Session has access to mounts?

    I have similar questions on these lines. I do want other accounts to be able to use applications that are on the computer, but I don't want them to be able to see any other folders except the ones that are on the home directory for that account. I am sure there has to be a way to do this. After all, isn't that one of the things about Linux? The ability to create these accounts and to only have access to certain things.

    I mean sure, I can restrict folder access and such, but what a pain to go around setting up all these permissions. Is there not a simple way to set up accounts to where they can run media players, word processing and other apps, but be limited to only being able to see the folders in the home directory for that account. I have a guest account too. I can see all the other directories in all the other accounts too though.

    Edit: I am using Hardy though and not Intrepid.
    Last edited by coldcoffee; October 31st, 2008 at 08:33 PM.

  6. #6
    Join Date
    May 2007
    Location
    Utah
    Beans
    110
    Distro
    Ubuntu 10.04 Lucid Lynx

    Re: Intrepid's Guest Session has access to mounts?

    Quote Originally Posted by ajgreeny View Post
    Just out of interest, can the guest user also read the user files of the first user, even if guest can't write to them?
    Nope, access is denied to the guest user. I double checked yesterday.

  7. #7
    Join Date
    May 2007
    Location
    Utah
    Beans
    110
    Distro
    Ubuntu 10.04 Lucid Lynx

    Re: Intrepid's Guest Session has access to mounts?

    Quote Originally Posted by coldcoffee View Post
    I have similar questions on these lines. I do want other accounts to be able to use applications that are on the computer, but I don't want them to be able to see any other folders except the ones that are on the home directory for that account. I am sure there has to be a way to do this. After all, isn't that one of the things about Linux? The ability to create these accounts and to only have access to certain things.

    I mean sure, I can restrict folder access and such, but what a pain to go around setting up all these permissions. Is there not a simple way to set up accounts to where they can run media players, word processing and other apps, but be limited to only being able to see the folders in the home directory for that account. I have a guest account too. I can see all the other directories in all the other accounts too though.

    Edit: I am using Hardy though and not Intrepid.
    I'm pretty sure all of this is available on the Guest access feature of Intrepid. It would be difficult for me to know where to start to implement that on Hardy, however.

Tags for this Thread

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •