mount_ntfs as normal user

Hello,

I'd like to ask that this scenario is correct, or my system is compromised or
somethin else?

I have in /etc/sysctl.conf
vfs.usermount=1

The ntfs slice is
$ ls -ld /dev/ad0s1
crw-r----- 1 root operator 0, 101 Sep 10 14:06 /dev/ad0s1

Next in my home directory create folder win
$ mkdir win
$ mount_ntfs /dev/ad0s1 win
$ ls win
here is the output

$AttrDef* MSDOS.SYS*
$BadClus* NTDETECT.COM*
$Bitmap* Program Files/
$Boot* RECYCLER/
[...]

but I am not in group 'operator', and I'm now as normal user (not 'root').
Check it
$ id
uid=1001(zbigniew) gid=1001(zbigniew) groups=1001(zbigniew),0(wheel),1004
(media)

My file /etc/devfs.rules is
[localrules=1]
add path 'da*' mode 0660 group media
add path 'cd*' mode 0660 group media
add path 'acd*' mode 0660 group media
add path 'pass*' mode 0660 group media
add path 'xpt*' mode 0660 group media
add path 'fd[0-3]*' mode 0660 group media


So it is normal that I can mount ntfs slice as normal user or it is a bug or
my system is compromised?

Because I read that if I want to mount device I must be in group e.g. operator
or create another group e.g. media. From handbook
http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/book.html#USB-DISKS
in section 18.5.2 Testing the Configuration

I must do in /etc/devfs.rules
[localrules=1]
add path 'da*' mode 0660 group operator

and in /etc/rc.conf file:
devfs_system_ruleset="localrules"

then I can mount USB devices.

It is also true for hard disc? If I want to mount ntfs slice as normal user I
must do what above but with the following changes

[localrules=1]
# for hard disc
add path 'ad*' mode 0660 group operator

Or I something do not understand (?).

But as I mention earlier I can mount ntfs slice as normal user even if I'm not
in operator group, it's normal, it's ok?

Please for help or comments. Thanks in advance for your help.
Zbigniew
_______________________________________________
freebsd-questions@xxxxxxxxxxx mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscribe@xxxxxxxxxxx"