/media -> /run/media???

[Lennart Poettering]

On Mon, 18.08.14 13:25, Richard W.M. Jones (rjones at redhat.com) wrote:

> On Mon, Aug 18, 2014 at 02:21:19PM +0200, Lennart Poettering wrote:
> > On Fri, 15.08.14 22:21, Nico Kadel-Garcia (nkadel at gmail.com) wrote:
> > 
> > > > I just reverted the "two weeks in rawhide" symlink change
> > > > already. /media is no longer symlink in Rawhide. Removeable media mount
> > > > point is not under control of filesystem package (udisks2 mount them
> > > > to /run/media/$USER/$Volname ).
> > > > Based on Michal's suggestion, you can use UDISKS_FILESYSTEM_SHARED set
> > > > to 1 to have removeable media mounted in /media instead
> > > > of /run/media/$USER/ .
> > > 
> > > *sigh*. Then the default should have been to set
> > > UDISKS_FILESYSTEM_SHARED to 1. Let people who *want* it in the new
> > > "/run/media/$USER/mountdir" select it. And it's *still* a violation of
> > > even the most recent filesystem hierarchy standards, which discuss the
> > 
> > Well, I am pretty sure we have the duty to implemen an operating system
> > that is secure by default. 
> 
> What's the security issue?  The bug (965918) doesn't mention one.

You don't want a shared namespace with other users, you want a per-user
namespace where you mount stuff. Otherwise other users on the system can
trick you into using the wrong usb stick, if you plug in two, simply by
choosing the same volume label as yours.

Lennart

-- 
Lennart Poettering, Red Hat