octavian.machidon/classroom
1
0
Fork 0
forked from rc/classroom
Code Pull requests Activity

Do not mount cifs volumes for local users; disable debug

Browse source
This commit is contained in:
Gašper Fele-Žorž 2025-09-01 00:21:18 +02:00
parent 957cd67eb7
commit c5754dece2
1 changed files with 19 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

21
roles/ad_joined/files/pam_mount.conf.xml
View file

@ -3,18 +3,35 @@
<pam_mount> <pam_mount>
<!-- Example using CIFS --> <!-- Example using CIFS -->
<debug enable="0" />
<volume <volume
fstype="cifs" fstype="cifs"
server="ucilnicesmb.fri1.uni-lj.si" server="ucilnicesmb.fri1.uni-lj.si"
path="%(USER)" path="%(USER)"
mountpoint="~/" mountpoint="~/"
options="sec=krb5i,cruid=%(USERUID)" options="sec=krb5i,cruid=%(USERUID)"
/> >
<not>
<or>
<user>local_admin</user>
<user>root</user>
<sgrp>sudo</sgrp>
</or>
</not>
</volume>
<volume <volume
fstype="cifs" fstype="cifs"
server="ucilnicesmb.fri1.uni-lj.si" server="ucilnicesmb.fri1.uni-lj.si"
path="profiles/%(DOMAIN_USER).V6" path="profiles/%(DOMAIN_USER).V6"
mountpoint="~/win_profile" mountpoint="~/win_profile"
options="sec=krb5i,cruid=%(USERUID)" options="sec=krb5i,cruid=%(USERUID)"
/> >
<not>
<or>
<user>local_admin</user>
<user>root</user>
<sgrp>sudo</sgrp>
</or>
</not>
</volume>
</pam_mount> </pam_mount>