- I want operator users on this machine to mount their own cifs shares
sudoersfile already contains the
/bin/mount -t cifs //*/* /media/* -o username=*command for all operators
- I want the users to mount a
cifsshare through a script typing the password only once, not twice.
- The sudo password and the cifs password are identical.
What I already have
This script works:
#!/bin/bash sudo 'mount -t cifs //192.168.1.1/home /media/$USER/home -o username=$USER'
...but it requires the users to type the same password twice!
- Once for
- Once for the mount itself
This would also work:
#!/bin/bash echo -n Password: read -s szPassword echo $szPassword | sudo -S sh -c 'echo $szPassword | mount -t cifs //192.168.1.1/home /media/$USER/home -o username=$USER'
...but this would require me to allow all operator users to be able to
sudo sh (major security problem)
How to mount a cifs share in bash¹ without putting
sh in the
sudoers file nor creating a permanent/temporary file???
Note 1: no python, perl, C, Go, ... please?
Note 2: I know I can just remove the password through the
sudoers file, but I'm trying to tighten security, not loosen it, without giving up convenience...