본문 바로가기

카테고리 없음

Tuxera. Com Community Ntfs- 3g- Faq Unprivileged



Name

User Mapping. NTFS uses specific ids to record the ownership of files instead of the uid and gid used by Linux. As a consequence a mapping between the ids has to be defined for ownerships to be recorded into NTFS and recognized. It may be another issue. First I would check dmesg and see if it tells where the USB device driver is located. Today I was using /dev/ub/a/part1 for a USB device. There may just be no /dev/sdd1 there, or that device may not have the right major/minor number for the USB memory stick, even though some tools are showing that device node. – ash Sep 5 '13 at 6:45. NTFS-3G is an open-source cross-platform implementation of the Microsoft Windows NTFS file system with read-write support. NTFS-3G often uses the FUSE file system interface, so it can run unmodified on many different operating systems.

ntfs-3g – Third Generation Read/Write NTFS Driver

Tuxera.

Contents

  • Description

Synopsis

ntfs-3g[-o option[,…]]volume mount_pointmount -t ntfs-3g[-o option[,…]]volume mount_point

lowntfs-3g[-o option[,…]]volume mount_pointmount -t lowntfs-3g[-o option[,…]]volume mount_point

Description

ntfs-3g is an NTFS driver, which can create, remove, rename, move files, directories, hard links, and streams; it can read and write files, including streams and sparse files; it can handle special files like symbolic links, devices, and FIFOs; moreover it can also read and create transparently compressed files.
It comes in two variants ntfs-3g and lowntfs-3g with a few differences mentioned below in relevant options descriptions.
The volume to be mounted can be either a block device or an image file.

Windows hibernation and fast restarting

On computers which can be dual-booted into Windows or Linux, Windows has to be fully shut down before booting into Linux, otherwise the NTFS file systems on internal disks may be left in an inconsistent state and changes made by Linux may be ignored by Windows.
So, Windows may not be left in hibernation when starting Linux, in order to avoid inconsistencies. Moreover, the fast restart feature available on recent Windows systems has to be disabled. This can be achieved by issuing as an Administrator the Windows command which disables both hibernation and fast restarting :

powercfg /h off

Tuxera Ntfs 2019 Crack

Access Handling and Security

By default, files and directories are owned by the effective user and group of the mounting process and everybody has full read, write, execution and directory browsing permissions. You can also assign permissions to a single user by using the uid and/or the gid options together with the umask, or fmask and dmask options.
Doing so, Windows users have full access to the files created by ntfs-3g.
But, by setting the permissions option, you can benefit from the full ownership and permissions features as defined by POSIX. Moreover, by defining a Windows-to-Linux user mapping in the file .NTFS-3G/UserMapping, the ownerships and permissions are even applied to Windows users and conversely.

If ntfs-3g is set setuid-root then non-root users will be also able to mount volumes.

Windows Filename Compatibility

NTFS supports several filename namespaces: DOS, Win32 and POSIX. While the ntfs-3g driver handles all of them, it always creates new files in the POSIX namespace for maximum portability and interoperability reasons. This means that filenames are case sensitive and all characters are allowed except ’/’ and ’0’. This is perfectly legal on Windows, though some applications may get confused. The option windows_names may be used to apply Windows restrictions to new file names.

Extensive Garageband iPad Tutorial Garageband is another unique gift from Apple for audiophiles and more pertinently for music creators or prodigies altogether. IPad further exploits the full functionality of GarageBand by extending the intuitiveness with its overtly simple but responsive touch screen gestures. How to make a good garageband song ipad to computer. Sep 06, 2016  50+ videos Play all Mix - Garageband 2.1.1 for iPad Live Tracks Dubstep Demo Song YouTube How to make a Crazy DROP in Garageband (iPad & iPhone) - Duration: 12:11. Arrived 649,075 views. GarageBand is a great way to quickly create music on your iPhone or iPad. We show how to get started with one of Apple's best software offerings. May 29, 2018  Composition and mixing instructor John Davies takes us through the basics of GarageBand for an introduction to the world of music production using one of the easiest, most streamlined DAWs.

Tuxera Ntfs Mac

Alternate Data Streams (ADS)

NTFS stores all data in streams. Every file has exactly one unnamed data stream and can have many named data streams. The size of a file is the size of its unnamed data stream. By default, ntfs-3g will only read the unnamed data stream. By using the options “streams_interface=windows” (not possible with lowntfs-3g), you will be able to read any named data streams, simply by specifying the stream’s name after a colon. For example:

cat some.mp3:artist

Named data streams act like normals files, so you can read from them, write to them and even delete them (using rm). You can list all the named data streams a file has by getting the “ntfs.streams.list” extended attribute.

Options

Most of the generic mount options described in mount(8) are supported (ro, rw, suid, nosuid, dev, nodev, exec, noexec). Below is a summary of the options that ntfs-3g additionally accepts.

Tuxera

uid=value and gid=value
Set the owner and the group of files and directories. The values are numerical. The defaults are the uid and gid of the current process.
umask=value
Set the bitmask of the file and directory permissions that are not present. The value is given in octal. The default value is 0 which means full access to everybody.
fmask=value
Set the bitmask of the file permissions that are not present. The value is given in octal. The default value is 0 which means full access to everybody.
dmask=value
Set the bitmask of the directory permissions that are not present. The value is given in octal. The default value is 0 which means full access to everybody.
usermapping=file-name
Use file file-name as the user mapping file instead of the default .NTFS-3G/UserMapping. If file-name defines a full path, the file must be located on a partition previously mounted. If it defines a relative path, it is interpreted relative to the root of NTFS partition being mounted.When a user mapping file is defined, the options uid=, gid=, umask=, fmask=, dmask= and silent are ignored.See ownership and permissions for valid combinations of security related options.
permissions
Set standard permissions on created files and use standard access control. This option is set by default when a user mapping file is present.
acl
Enable setting Posix ACLs on created files and use them for access control. This option is only available on specific builds. It is set by default when a user mapping file is present and the permissions mount option is not set.
inherit
When creating a new file, set its initial protections according to inheritance rules defined in parent directory. These rules deviate from Posix specifications, but yield a better Windows compatibility. The permissions option or a valid user mapping file is required for this option to be effective.
ro
Mount filesystem read-only. Useful if Windows is hibernated.
ignore_case
(only with lowntfs-3g) Ignore character case when accessing a file (FOO, Foo, foo, etc. designate the same file). All files are displayed with lower case in directory listings.
remove_hiberfile
Unlike in case of read-only mount, the read-write mount is denied if the NTFS volume is hibernated. One needs either to resume Windows and shutdown it properly, or use this option which will remove the Windows hibernation file. Please note, this means that the saved Windows session will be completely lost. Use this option for your own responsibility.
recover
Recover and try to mount a partition which was not unmounted properly by Windows. The Windows logfile is cleared, which may cause inconsistencies. Currently this is the default option.
norecover
Do not try to mount a partition which was not unmounted properly by Windows.
atime, noatime, relatime
The atime option updates inode access time for each access.The noatime option disables inode access time updates which can speed up file operations and prevent sleeping (notebook) disks spinning up too often thus saving energy and disk lifetime.The relatime option is very similar to noatime. It updates inode access times relative to modify or change time. The access time is only updated if the previous access time was earlier than the current modify or change time. Unlike noatime this option doesn’t break applications that need to know if a file has been read since the last time it was modified. This is the default behaviour.
show_sys_files
Show the system files in directory listings. Otherwise the default behaviour is to hide the system files. Please note that even when this option is specified, “$MFT” may not be visible due to a glibc bug. Furthermore, irrespectively of show_sys_files, all files are accessible by name, for example you can always do “ls -l ’$UpCase’”.
hide_hid_files
Hide the hidden files and directories in directory listings, the hidden files and directories being the ones whose NTFS attribute have the hidden flag set. The hidden files will not be selected when using wildcards in commands, but all files and directories remain accessible by full name, for example you can always display the Windows trash bin directory by : “ls -ld $RECYCLE.BIN”.
hide_dot_files
Set the hidden flag in the NTFS attribute for created files and directories whose first character of the name is a dot. Such files and directories normally do not appear in directory listings, and when the flag is set they do not appear in Windows directory displays either.
windows_names
This option prevents files, directories and extended attributes to be created with a name not allowed by windows, either because it contains some not allowed character (which are the nine characters ” * / : < > ? | and those whose code is less than 0x20) or because the last character is a space or a dot. Existing such files can still be read (and renamed).
max_read=value
With this option the maximum size of read operations can be set. The default is infinite. Note that the size of read requests is limited anyway to 32 pages (which is 128kbyte on i386).
silent
Do nothing, without returning any error on chown and chmod operations and on permission checking errors, when the permissions option is not set and no user mapping file is defined. This option is on by default, and when set off (through option no_def_opts) ownership and permissions parameters have to be set.
no_def_opts
By default ntfs-3g acts as if silent (ignore permission errors when permissions are not enabled), allow_other (allow any user to access files) and nonempty (allow mounting on non-empty directories) were set, the no_def_opts option cancels this behaviour.
streams_interface=value
This option controls how the user can access Alternate Data Streams (ADS) or in other words, named data streams. It can be set to, one of none, windows or xattr. If the option is set to none, the user will have no access to the named data streams. If it’s set to windows (not possible with lowntfs-3g), then the user can access them just like in Windows (eg. cat file:stream). If it’s set to xattr, then the named data streams are mapped to xattrs and user can be manipulated by using {get,set}fattr utilities. The default is xattr on Linux, none on other OSes.
user_xattr
Same as streams_interface=xattr.
efs_raw
This option should only be used in backup or restore situation. It changes the apparent size of files and the behavior of read and write operations so that encrypted files can be saved and restored without being decrypted. The user.ntfs.efsinfo extended attributes associated to files have also to be saved and restored for the files to be decrypted later.
compression
This option enables creating new transparently compressed files in directories marked for compression. A directory is marked for compression by setting the bit 11 (value 0x00000800) in its Windows attribute. In such a directory, new files are created compressed and new subdirectories are themselves marked for compression. The option and the flag have no effect on existing files. Currently this is the default option.
nocompression
This option disables creating new transparently compressed files in directories marked for compression. Existing compressed files can still be read and updated.
big_writes
This option prevents fuse from splitting write buffers into 4K chunks, enabling big write buffers to be transferred from the application in a single step (up to some system limit, generally 128K bytes).
force
This mount option is not used anymore. It was superseded by the recover and norecover options.
debug
Makes ntfs-3g to not detach from terminal and print a lot of driver debug output.
no_detach
Same as above but with less debug output.

User Mapping

NTFS uses specific ids to record the ownership of files instead of the uid and gid used by Linux. As a consequence a mapping between the ids has to be defined for ownerships to be recorded into NTFS and recognized. By default this mapping is fetched from the file .NTFS-3G/UserMapping located in the NTFS partition. The option usermapping= may be used to define another location.

Each line in the user mapping file defines a mapping. It is organized in three fields separated by colons. The first field identifies a uid, the second field identifies a gid and the third one identifies the corresponding NTFS id, known as a SID. The uid and the gid are optional and defining both of them for the same SID is not recommended.

If no interoperation with Windows is needed, you can use the option permissions to define a standard mapping. Alternately, you may define your own mapping by setting a user mapping file with a single line with no uid or gid. In both cases, files created on Linux will appear to Windows as owned by a foreign user, and files created on Windows will appear to Linux as owned by root. Copy the example below and replace the 9 and 10-digit numbers by any number not greater than 4294967295.

Tuxera Ntfs Crack

Tuxera

::S-1-5-21-3141592653-589793238-462643383-10000

If interoperation with Windows is needed, the mapping has to be defined for each user and group known in both system, and the SIDs used by Windows has to be collected. This will lead to a user mapping file like :

john::S-1-5-21-3141592653-589793238-462643383-1008
mary::S-1-5-21-3141592653-589793238-462643383-1009
:smith:S-1-5-21-3141592653-589793238-462643383-513
::S-1-5-21-3141592653-589793238-462643383-10000

The utilities ntfs-3g.usermap or ntfs-3g.secaudit (with option -u) may be used to create the user mapping file.

Examples

Mount /dev/sda1 to /mnt/windows (make sure /mnt/windows exists):

ntfs-3g /dev/sda1 /mnt/windowsor mount -t ntfs-3g /dev/sda1 /mnt/windows

Mount the ntfs data partition /dev/sda3 to /mnt/data with standard Linux permissions applied :

ntfs-3g -o permissions /dev/sda3 /mnt/dataor mount -t ntfs-3g -o permissions /dev/sda3 /mnt/data

Read-only mount /dev/sda5 to /home/user/mnt and make user with uid 1000 to be the owner of all files:

Virtual dj sound mixer download for pc. Do you want to make music with DJ Remix Equalizer? The DJ Music Mixer Pro application is simple and easy to use for. Now you can download this app for free, there's the best DJ remix sound in. Virtual DJ Software, MP3 and Video mix software. VirtualDJ provides instant BPM beat matching, synchronized sampler, scratch, automatic seamless loops. Jan 22, 2020  Virtual DJ software let your PC work as a virtual DJ music player, as a Disc Jockey, you can let multiple music connected without interruption, and add special sound to.

ntfs-3g -o ro,uid=1000 /dev/sda5 /home/user/mnt

/etc/fstab entry for the above (the sixth and last field should be zero to avoid a file system check at boot time) :

/dev/sda5 /home/user/mnt ntfs-3g ro,uid=1000 0 0

Unmount /mnt/windows:

umount /mnt/windows

Exit codes

To facilitate the use of the ntfs-3g driver in scripts, an exit code is returned to give an indication of the mountability status of a volume. Value 0 means success, and all other ones mean an error. The unique error codes are documented in the ntfs-3g.probe(8) manual page.

Known issues

Please see

Tuxera Ntfs Tnt

for common questions, known issues and support.

Acknowledgement

Tuxera Ntfs For Windows

Several people made heroic efforts, often over five or more years which resulted the ntfs-3g driver. Most importantly they are Anton Altaparmakov, Richard Russon, Szabolcs Szakacsits, Yura Pakhuchiy, Yuval Fledel, Jean-Pierre André, Alon Bar-Lev, Dominique L Bouix, Csaba Henk, Bernhard Kaindl, Erik Larsson, Alejandro Pulver, and the author of the groundbreaking FUSE file system development framework, Miklos Szeredi.

See also

ntfs-3g.probe(8), ntfsprogs(8), attr(5), getfattr(1), setfattr(1)

Welcome! By entering our site, you accept our terms of use, privacy policy, and our use of cookies. Learn more here.

Tuxera continues to serve our global customers during the COVID-19 pandemic, while ensuring the well-being of our employees and their families. Read the full announcement.

View unanswered posts | View active topics It is currently Sun Apr 12, 2020 02:23

Unable to mount without root

Moderators: d242, szaka



Page 1 of 3 [ 51 posts ] Go to page1, 2, 3Next
Previous topic | Next topic
Author Message

Joined: Thu Nov 29, 2007 06:32
Posts: 28
Location: North Carolina
Unable to mount without root
Alright, I have read the FAQ and tried the second option (the one using chmod 4750) since the first was risky, and I still cannot mount my NTFS partition as anybody except root. The system is nothing special, just an Acer Aspire 5102WLMi laptop running Debian Etch and XP Pro x64 Edition. I just today compiled and installed fuse 2.7.1 and ntfs-3g 1.1120. My first goal was just to mount the drive, and at first I was getting permission denial errors as my normal user, but now hat did the chmod fix on this site, I get no error but the drive never mounts.
Before I ask for any help though, I should state that I created a group called 'ntfsusers' that I intend on using to grant mount permission in the long-run. This way if I allow a friend on the machine under a new account, they cannot mount my XP partition. So how would I setup mounting in this fashion? My fstab is pasted below,
# /etc/fstab: static file system information.
#
# <file system> <mount point> <type> <options> <dump> <pass>
proc /proc proc defaults 0 0
/dev/hda1 / ext3 defaults,errors=remount-ro 0 1
/dev/hda2 none swap sw 0 0
/dev/hda3 /media/windows ntfs-3g rw,user,noauto 0 0
/dev/hdb /media/cdrom0 udf,iso9660 user,noauto 0 0


Fri Nov 30, 2007 01:38

Joined: Tue Nov 21, 2006 23:15
Posts: 1648
What's the output of
ntfs-3g /dev/hda3 /media/windows
cat /proc/mounts
ls -l $(which ntfs-3g)


Fri Nov 30, 2007 01:52

Joined: Thu Nov 29, 2007 06:32
Posts: 28
Location: North Carolina
As my normal user:
sephiroth@AcerLaptop:~$ ntfs-3g /dev/hda3 /media/windows
bash: /bin/ntfs-3g: Permission denied
sephiroth@AcerLaptop:~$

As root:
AcerLaptop:~# ntfs-3g /dev/hda3 /media/windows
AcerLaptop:~# cat /proc/mounts
rootfs / rootfs rw 0 0
none /sys sysfs rw 0 0
none /proc proc rw 0 0
udev /dev tmpfs rw 0 0
/dev/hda1 / ext3 rw,data=ordered 0 0
/dev/hda1 /dev/.static/dev ext3 rw,data=ordered 0 0
tmpfs /lib/init/rw tmpfs rw,nosuid 0 0
usbfs /proc/bus/usb usbfs rw,nosuid,nodev,noexec 0 0
tmpfs /dev/shm tmpfs rw,nosuid,nodev 0 0
devpts /dev/pts devpts rw,nosuid,noexec 0 0
fusectl /sys/fs/fuse/connections fusectl rw 0 0
/dev/hda3 /media/windows fuseblk rw,nosuid,nodev,user_id=0,group_id=0,allow_other 0 0
AcerLaptop:~# ls -l $(which ntfs-3g)
-rwsr-x--- 1 root ntfsusers 122582 2007-11-29 12:51 /bin/ntfs-3g
AcerLaptop:~#

Also, I must say that it's impressive to see a lead developer responding to forum posts, especially on such a large project. You don't get that on most payware product forums.


Fri Nov 30, 2007 01:56

Joined: Tue Nov 21, 2006 23:15
Posts: 1648
Everything looks fine. The mounting user is either not in the ntfsusers group or you didn't login/logoff, so it wasn't taken in use yet.


Fri Nov 30, 2007 13:38

Joined: Thu Nov 29, 2007 06:32
Posts: 28
Location: North Carolina
I had logged in and out several times while testing my own tools to crack WEP/WPA networks since I have made them for the shell, and prefer to test at the true shell as root. However, I just now booted the laptop for the first time today and it worked, which leads me to believe that I had to reboot for the changes to take effect.
I do have one final question though. What exactly did I modify when I followed your FAQ instructions and did 'chmod 4750 $(where ntfs-3g)'? I am assuming it modded every file with ntfs-3g in the name to 4750. If this is the case, what was the default value in case I ever need to revert to it? Oh, and since I did that modification, will ntfs-3g still honor the 'noexec' parameter in fstab?


Fri Nov 30, 2007 18:02

Joined: Tue Nov 21, 2006 23:15
Posts: 1648
> What exactly did I modify when I followed your FAQ instructions and did
> 'chmod 4750 $(where ntfs-3g)'? I am assuming it modded every file with
> ntfs-3g in the name to 4750.
No. The ntfs-3g permission was changed to 4750 (rwsr-x---), so only the configured user in the group can mount.
> If this is the case, what was the default value in case I ever need to
> revert to it?
755
> Oh, and since I did that modification, will ntfs-3g still honor the 'noexec'
> parameter in fstab?
Yes, it's still honored.


Fri Nov 30, 2007 18:43
Hi, everybody,
I've got a similar problem. Before asking questions I did a modest research and I'm curious. Where is FAQ which the author of this tread is referring to? Where is ntfs-3g manual? Even Google presented me only with the ntfs-3g main page where the manual is just mentioned (no link).
The history:
PCLinuxOS system, ntfs-3g driver from it's repository; everything is fine up to a certain moment, coinciding with the installation of VirtualBox. Now I can mount and access my NTFS partition only as root. The only think I can put my finger on is the absence of ntfsusers group on my machine. Is it mandatory? Maybe a bug in the VirtualBox package destroyed the group, or something like that?
Any suggestions?
Best regards, Alexey


Sun Jan 27, 2008 12:36

Joined: Tue Nov 21, 2006 23:15
Posts: 1648
Unable to mount without root
On Sun, 27 Jan 2008, Alexey931 wrote:
I've got a similar problem. Before asking questions I did a modest
research and I'm curious. Where is FAQ which the author of this tread is
referring to?

On the NTFS-3G web site. This question is answered at http://ntfs-3g.org/support.html#useroption
Where is ntfs-3g manual?

Installed on your computer. Type 'man ntfs-3g' or use any of your favorite
tool to search and browse the OS manuals.


Sun Jan 27, 2008 12:55
Installed on your computer.
:lol:
Thanks!


Sun Jan 27, 2008 13:52
After applying
# chown root $(which ntfs-3g)
# chmod 4755 $(which ntfs-3g)
I can user-mount my NTFS partition, but unmounting can still be done only with root privileges. I can live with that, but it isn't pretty :) . Is there a way to streamline it?
Grateful in advance, Alexey


Mon Jan 28, 2008 13:21

Joined: Tue Nov 21, 2006 23:15
Posts: 1648
The umount utility is broken unfortunately but 'fusermount -u <mountpoint>' should work.


Mon Jan 28, 2008 22:40

Joined: Thu Nov 29, 2007 06:32
Posts: 28
Location: North Carolina
I hate to dig up an old thread, but I am experiencing this AGAIN on a Dell XPS laptop running Debian Etch 32bit, FUSE 2.7.3, and NTSF-3G 1.2712. I have done the normal 'chown' and 'chmod' commands in the FAQ, rebooted, and still no luck. Only root can mount and unmount the partition. My user is a member of the 'ntfsusers' group, and 'chown root:ntfsusers $(which ntfs-3g)' should have set that. I have done that and the chmod line with both 4750 and 4755, and rebooted, and neither works. What in the world is wrong?


Wed Jul 23, 2008 05:32

Joined: Thu Nov 29, 2007 06:32
Posts: 28
Location: North Carolina
Thought I would post the problem from the machine with the problem! These are pasted right out of the konsole window, being run as the regular user. As you can see, everything appears right, but it isn't working. This user is in the 'ntfsusers' group, according to kuser.
Mounting attempts:
user@XPS:~$ mount /dev/sda3
Error opening '/dev/sda3': Permission denied
Failed to mount '/dev/sda3': Permission denied
Please check '/dev/sda3' and the ntfs-3g binary permissions,
and the mounting user ID. More explanation is provided at
http://ntfs-3g.org/support.html#unprivileged
user@XPS:~$ ntfs-3g /dev/sda3 /media/windows
Error opening '/dev/sda3': Permission denied
Failed to mount '/dev/sda3': Permission denied
Please check '/dev/sda3' and the ntfs-3g binary permissions,
and the mounting user ID. More explanation is provided at
http://ntfs-3g.org/support.html#unprivileged

Permissions:
user@XPS:~$ ls -l $(which ntfs-3g)
-rwsr-x--- 1 root ntfsusers 98392 2008-07-20 22:40 /bin/ntfs-3g

Mount info:
user@XPS:~$ cat /proc/mounts
rootfs / rootfs rw 0 0
none /sys sysfs rw 0 0
none /proc proc rw 0 0
udev /dev tmpfs rw 0 0
/dev/sda1 / ext3 rw,data=ordered 0 0
/dev/sda1 /dev/.static/dev ext3 rw,data=ordered 0 0
tmpfs /lib/init/rw tmpfs rw,nosuid 0 0
usbfs /proc/bus/usb usbfs rw,nosuid,nodev,noexec 0 0
tmpfs /dev/shm tmpfs rw,nosuid,nodev 0 0
devpts /dev/pts devpts rw,nosuid,noexec 0 0
fusectl /sys/fs/fuse/connections fusectl rw 0 0

So what in the world could be causing this? I have been held up for three days with this laptop due to this problem. I need to finish this and get it back to the user, but it just plain refuses to work!


Wed Jul 23, 2008 18:01

Joined: Tue Sep 04, 2007 17:22
Posts: 1286
Hi,
According to the FAQ :
Unprivileged block device mounts work only if NTFS-3G is compiled with integrated FUSE support, the ntfs-3g binary is at least version 1.2506, set to setuid-root, and the user has access rights to the volume and mount point.

Did you check all the conditions ?
I see no indications for :
ls -l /dev/sda3
ls -ld /media/windows
grep ntfsusers /etc/group
Regards
Jean-Pierre


Wed Jul 23, 2008 19:22

Joined: Thu Nov 29, 2007 06:32
Posts: 28
Location: North Carolina
The device 'sda3' is owned by 'root:disk', like all the other sda partitions. The mount-point '/media/windows' is a copy of '/media/cdrom0', which has worked on the AMD64 build. As for the group results, it only contains the user account name, as that person is the only user. I also checked gshadow, and that user is the only one in the group there as well.


Wed Jul 23, 2008 20:17

Joined: Tue Sep 04, 2007 17:22
Posts: 1286
Hi,
The device 'sda3' is owned by 'root:disk'

If the mode is the usual 640 no user can access it. You may want to grant access to group ntfsuser by :
setfacl -m g:ntfsuser:rw /dev/sda3
The same might go for /media/windows
Regards
Jean-Pierre


Wed Jul 23, 2008 21:11

Joined: Thu Nov 29, 2007 06:32
Posts: 28
Location: North Carolina
That shouldn't be the issue. This laptop is also running Debian Etch and NTFS-3G, and I just checked the three partitions. The root user and disk group own all three here also, and this normal account I am posting with can mount and unmount the 'hda3' partition with ease. Note that this laptop has an older PATA HDD, so they are hda, and the new laptop has SATA, which is sda. I followed the exact same steps on both laptops and this one works while the other one doesn't, which is driving me insane.
This laptop:
AcerLaptop:~# cd /dev
AcerLaptop:/dev# l hda*
brw-rw---- 1 root disk 3, 0 2008-07-23 18:20 hda
brw-rw---- 1 root disk 3, 1 2008-07-23 18:20 hda1
brw-rw---- 1 root disk 3, 2 2008-07-23 18:20 hda2
brw-rw---- 1 root disk 3, 3 2008-07-23 18:20 hda3
AcerLaptop:/dev#

Dell XPS Laptop:
XPS:~# cd /dev
XPS:/dev# l sda*
brw-rw---- 1 root disk 8, 0 2008-07-23 18:20 sda
brw-rw---- 1 root disk 8, 1 2008-07-23 18:20 sda1
brw-rw---- 1 root disk 8, 2 2008-07-23 18:20 sda2
brw-rw---- 1 root disk 8, 3 2008-07-23 18:20 sda3
XPS:/dev#

As you can see, they're identical, except the '3' is '8' on the new system. Not sure what that indicates, as I normally don't play around in /dev! Still, the permissions are the same. I also checked and /media/cdrom0 and /media/windows have identical permissions. I can mount CDROMs, but not the NTFS partition.
If it matters, both laptops are setup with hda1 being ext3 for Debian, hda2 as a 2GB swap partition, and hda3 as an NTFS system with XP Pro 32bit on the XPS and XP Pro x64 on this one. We use Linux for work and for keeping an image of a fresh install of XP on the third partition. This way we can simply copy our data files to a backup server or shared folder, restore the image, perform a Windows Update, make a new image, copy our data files back, and we're up and running with a clean install as if we'd done a full day of formatting and such!


Thu Jul 24, 2008 04:37

Joined: Tue Nov 21, 2006 23:15
Posts: 1648
> That shouldn't be the issue.
Exactly that's the issue what Jean-Pierre told. This is how the functionality was design, implemented and documented: http://www.ntfs-3g.org/support.html#useroption
Earlier NTFS-3G versions didn't require this which was a security hole, so we fixed it.
Regards, Szaka


Thu Jul 24, 2008 10:52

Joined: Thu Nov 29, 2007 06:32
Posts: 28
Location: North Carolina
So what version first implemented this fix? I know that this version is newer than the one on the XPS laptop (I am on the Acer laptop now), but I didn't think that it was very old. I also find it odd that one can mount a CD/DVD device with the same permissions as the HD device, but not the HD device. Why is that? Oh and what exactly is the command he posted above, I have never seen it before and am leary about using it on my system until I know what it does.


Thu Jul 24, 2008 17:13

Joined: Thu Nov 29, 2007 06:32
Posts: 28
Location: North Carolina
Just wanted to say that I found information on that command and understand it now. I haven't had to use it in eons, but after reading about it, something in the back of my mind screams at me from my *shudder* RedHat days. Oh and this laptop is using version 1.1120 of NTFS-3G. Is this prior to the security fix?


Thu Jul 24, 2008 17:24

Joined: Thu Nov 29, 2007 06:32
Posts: 28
Location: North Carolina
I hate to make a third post, but I cannot edit my own posts, and I have another problem. The command 'setfacl' is apparently not valid in Debian Etch, and a quick search for 'setfacl' with the package-manager returned nothing. So what do I do?


Thu Jul 24, 2008 17:33

Joined: Thu Nov 29, 2007 06:32
Posts: 28
Location: North Carolina
Alright I found it as a package. However, after installing and attempting to use the exact command posted above, I get '/dev/sda3: operation not supported'. Maybe Debian doesn't use ACL in the stock kernel or something? Do I have to play with ACLs to make this work? It is turning out to be one gigantic headache and time-killer just to make it work at all. I didn't have to modify the ACL for other partitions or CD/DVD devices to allow the user on that machine to mount/unmount them, so why on earth would this one be different?


Thu Jul 24, 2008 17:45

Joined: Thu Nov 29, 2007 06:32
Posts: 28
Location: North Carolina
I wanted to note that all of my Linux systems (all are Debian Etch) appear to have 660 as the default for all devices, including /dev/sda3. I have tried using 666, but my user still cannot mount the device. I also have no way of knowing whether or not my kernel supports ACL, but I cannot get setfacl to work at all, on any file. I am assuming that my kernel does not support ACL at this point, which is fine by me. How else can I get this device mountable by a normal user?


Thu Jul 24, 2008 19:54

Joined: Tue Sep 04, 2007 17:22
Posts: 1286
Hi,
I have tried using 666, but my user still cannot mount the device

Do you still get '/dev/sda3': Permission denied' ?
And are you sure the user can access the mount point ?
I suggested using an ACL, which is the way fedora/gnome uses to grant access to local devices (printer, cdrom, audio, etc.) only to the user logged on the desktop. I have made a try with a Knoppix live-cd (based on Debian, with no apparent ACL support) and KDE. For the same purpose, it apparently puts the user logged on the desktop into groups audio, cdrom etc. You might do the same way, putting your specific user into group disk.
Regards
Jean-Pierre


Thu Jul 24, 2008 21:52

Joined: Thu Nov 29, 2007 06:32
Posts: 28
Location: North Carolina
The other systems that use your program do not have the users in the 'disk' group and they have no problems. I did try that earlier though, and I then got an error about not being able to access '/media/windows'. Knowing that was utter BS, I mounted the partition as root, then went right into that directory as my user and proceeded to delete the pagefile and hibernation file. My user had full read/write access as intended, but is unable to mount the partition.
This leads me to believe that there is a bug in the mounting utility provided by either FUSE or NTFS-3G on a system without ACL. If not, I am lost. The user can access '/media/windows' and '/media/cdrom' even though they're both owned by root:root, yet NTFS-3G doesn't see things this way and if my user is in the disk group, will complain about it. If I remove her from the disk group, she can't even get that far.


Thu Jul 24, 2008 22:23
Page 1 of 3 [ 51 posts ] Go to page1, 2, 3Next


Who is online

Users browsing this forum: No registered users and 5 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group.
Original forum style by Vjacheslav Trushkin.