up vote 3 down vote favorite
1

I know I can give permission to use "mount/unmount" through sudo some users without password.

But how can I give permission to use "mount/unmount" only for /dev/sda2 and not for /dev/sda10?

For example, some user can execute: sudo mount -t ntfs /dev/sda2 ~/mnt/ntfs
But the same user must not have permission to execute: sudo mount /dev/sda10 ~/mnt/s10

share|improve this question
    
the sudo command let you become root for a while. So, if you are root, shall be no limitations – feligiotti Oct 7 '14 at 8:10
    
@gio900 The point is that one wants to only allow a given user to run a specific command with a specific parameter with root privileges. – fkraiem Oct 7 '14 at 8:12
    
so I cant restrict mount only for /dev/sda2? – Dimetry Oct 7 '14 at 8:12
    
ok, so if you let that user to run a script instead the command, thats limitation will be in the script – feligiotti Oct 7 '14 at 8:14
    
@gio900 how can I make such script? – Dimetry Oct 7 '14 at 8:16
up vote 6 down vote accepted

you could create a simple file:

 sudo visudo -f /etc/sudoers.d/myOverrides

with this directive:

 User ALL = NOPASSWD:/sbin/mount -t ntfs /dev/sda2 /home/User/mnt/ntfs

This allow User to runs mount command with those parameter without entering a password.

Here is sudo manual for more details.

share|improve this answer
    
Still problem. sudo -l: User dmit may run the following commands on mintPC: (ALL : ALL) ALL (root) NOPASSWD: /bin/mount -t ntfs /dev/sda2 /home/dmit/mnt/ntfs /bin/mount -t ntfs /dev/sda2 /home/dmit/mnt/ntfs mount: only root can do that – Dimetry Oct 7 '14 at 12:28
    
You should run mount with sudo: "sudo mount -t ntfs /dev/sda2 /home/dmit/mnt/ntfs" and this will not ask you for password – Lety Oct 7 '14 at 15:50
    
You are right. Solved. ty – Dimetry Oct 7 '14 at 15:59
up vote 0 down vote

You can specify arguments in the sudoers file, something like this should work:

user ALL=(ALL) /sbin/mount -t ntfs /dev/sda2 /home/user/mnt/ntfs, /sbin/umount /dev/sda2
share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.