Experiments part 12
[inetstation.git] / modules / system / files / etc / security / pam_mount.conf.xml
1 <?xml version="1.0" encoding="utf-8" ?>
2 <!DOCTYPE pam_mount SYSTEM "pam_mount.conf.xml.dtd">
3 <!--
4         See pam_mount.conf(5) for a description.
5 -->
6
7 <pam_mount>
8
9                 <!-- debug should come before everything else,
10                 since this file is still processed in a single pass
11                 from top-to-bottom -->
12
13 <debug enable="0" />
14
15                 <!-- Volume definitions -->
16
17
18                 <!-- pam_mount parameters: General tunables -->
19
20 <!--
21 <luserconf name=".pam_mount.conf.xml" />
22 -->
23
24 <!-- Note that commenting out mntoptions will give you the defaults.
25      You will need to explicitly initialize it with the empty string
26      to reset the defaults to nothing. -->
27 <mntoptions allow="nosuid,nodev,loop,encryption,fsck,nonempty,allow_root,allow_other" />
28 <!--
29 <mntoptions deny="suid,dev" />
30 <mntoptions allow="*" />
31 <mntoptions deny="*" />
32 -->
33 <mntoptions require="nosuid,nodev" />
34
35 <logout wait="0" hup="0" term="0" kill="0" />
36
37
38                 <!-- pam_mount parameters: Volume-related -->
39
40 <mkmountpoint enable="1" remove="true" />
41
42 <volume user="guest" fstype="tmpfs" mountpoint="/tmp/tmpfs-%(USER)" options="size=10M,uid=%(USER),mode=0700" />
43 <volume user="guest" fstype="unionfs" mountpoint="/home/guest" options="dirs=/tmp/tmpfs-%(USER):/etc/skel=ro:/home/guest=ro" />
44
45 </pam_mount>