赋予普通用户挂载光驱的权限(国外英语资料).docVIP

赋予普通用户挂载光驱的权限(国外英语资料) Grant ordinary users the license to mount optical drives Grant ordinary users the license to mount optical drives By default, ordinary users cannot mount CD-ROM, suggesting only root can [root@mylab Su - Lab ~]# [lab@mylab mount /dev/cdrom /mnt/ ~]$ Mount:, only, root, can, do, that Suppose there are a few ordinary users on the machine who want them to use the drive, but they cant tell the root password, This requires them to give the least permissions, but can also use CD-ROM, you can use sudo to achieve. Here is a test case 1, root can mount, of course [root@mylab mount /dev/cdrom /mnt/ ~]# Mount:, block, device, /dev/cdrom, is, write-protected, mounting, read-only 2, the average user lab can not do it! [root@mylab Su - Lab ~]# [lab@mylab mount /dev/cdrom /mnt/ ~]$ Mount:, only, root, can, do, that 3, try to use sudo to perform, suggesting that there is no lab sudoers, miserable, but also been recorded [lab@mylab sudo mount /dev/cdrom /mnt/ ~]$ Password: Lab, is, not, in, the, sudoers, file., This, incident,, will, be, reported. 4, the following to use visudo to modify permissions (/etc/sudoers file prompted to use visudo modify) [root@mylab visudo ~]# Search keyword CDROM to find the following lines Members of the users ## Allows group to mount and unmount the ## CDROM as root #%users ALL=/sbin/mount /mnt/cdrom, /sbin/umount /mnt/cdrom The%users indicates that the users group ALL represents the hostlist (host list), and the sign behind it indicates the command to execute The line above means that members of the users group can execute the two commands, /sbin/mount, /mnt/cdrom, and /sbin/umount /mnt/cdrom RHEL5.3 in practice, the mount command is under /bin, not /sbin [root@mylab which mount ~]# /bin/mount [root@mylab which umount ~]# /bin/umount Now give lab users the ability to mount and uninstall drive drives, such as down, multiple commands separated by commas, saved and exited Lab, ALL=/bin/mount, /dev/cdrom, /mnt, /bin/umount, /dev/cdr