How to prevent ChromeOS from placing a noexec flag on a mounted device?

1,210 views
Skip to first unread message

undyinglight

unread,
Feb 13, 2018, 4:10:34 PM2/13/18
to Chromium OS discuss

I am not much of a power user so please forgive me if some of my terminology is not 100% accurate in what I am trying to describe. I know that as a security measure ChromeOS prevents things like USB drives and SD Cards from running executable programs. I often use Ubuntu through Crouton for things that I do and it would make things far more convenient for me if this was possible to disable.


For example if I want to play DOTA 2 installed on an SD Card I would swap over to Ubuntu plug in the SD Card and then need to mount it via the command Line in Ubuntu by typing in something like 'sudo mount -t vfat -o defaults,nosuid,nodev /dev/mmcblk1p1 /home/ubuntu/SDcard'


Is it possible to disable this feature so that I could just plug in an SD Card and run DOTA 2 without first inputting that into the command line, or plug in a USB Drive with an exe of Blender on it without having to mount that from the command line either? This would be of massive convenience and a big time saver if I could get this working as I want it. Thank you all for your help.

beliefless dogmasless

unread,
Feb 13, 2018, 4:13:45 PM2/13/18
to sammywil...@gmail.com, Chromium OS discuss
Here, some track:
https://www.reddit.com/r/chromeos/comments/7q57dm/where_is_fstab_on_chromeos/

Perso., I did not 'yet' figure out, where it was "exaclty".

--
--
Chromium OS discuss mailing list: chromium-...@chromium.org
View archives, change email options, or unsubscribe:
http://groups.google.com/a/chromium.org/group/chromium-os-discuss?hl=en

---
You received this message because you are subscribed to the Google Groups "Chromium OS discuss" group.
To unsubscribe from this group and stop receiving emails from it, send an email to chromium-os-dis...@chromium.org.

Mike Frysinger

unread,
Feb 13, 2018, 4:17:45 PM2/13/18
to sammywil...@gmail.com, Chromium OS discuss
it is not possible to disable noexec/nodev/nosuid by design.  your only option is to remount.
-mike

--
--
Chromium OS discuss mailing list: chromium-os-discuss@chromium.org

Mike Frysinger

unread,
Feb 13, 2018, 4:23:28 PM2/13/18
to beliefless dogmasless, sammywil...@gmail.com, Chromium OS discuss
there is no /etc/fstab in CrOS.  any mount points are hardcoded in various startup scripts (like pre-startup.conf and pstore.conf in /etc/init/, or /sbin/chromeos_startup).  CrOS, by design, does not need or want /etc/fstab.  i'm not sure where the blank file is coming from in CrOS, but we could install a stub file with a comment like "CrOS does not use this at all.".

all the dynamic mounts from zip/rar/USB sticks are managed by the cros-disks daemon.  it doesn't look at /etc/fstab either.
-mike

On Tue, Feb 13, 2018 at 4:13 PM, beliefless dogmasless <katr...@gmail.com> wrote:
Here, some track:
https://www.reddit.com/r/chromeos/comments/7q57dm/where_is_fstab_on_chromeos/

Perso., I did not 'yet' figure out, where it was "exaclty".

On Tue, Feb 13, 2018 at 10:10 PM undyinglight <sammywil...@gmail.com> wrote:

I am not much of a power user so please forgive me if some of my terminology is not 100% accurate in what I am trying to describe. I know that as a security measure ChromeOS prevents things like USB drives and SD Cards from running executable programs. I often use Ubuntu through Crouton for things that I do and it would make things far more convenient for me if this was possible to disable.


For example if I want to play DOTA 2 installed on an SD Card I would swap over to Ubuntu plug in the SD Card and then need to mount it via the command Line in Ubuntu by typing in something like 'sudo mount -t vfat -o defaults,nosuid,nodev /dev/mmcblk1p1 /home/ubuntu/SDcard'


Is it possible to disable this feature so that I could just plug in an SD Card and run DOTA 2 without first inputting that into the command line, or plug in a USB Drive with an exe of Blender on it without having to mount that from the command line either? This would be of massive convenience and a big time saver if I could get this working as I want it. Thank you all for your help.

--
--
Chromium OS discuss mailing list: chromium-os-discuss@chromium.org

View archives, change email options, or unsubscribe:
http://groups.google.com/a/chromium.org/group/chromium-os-discuss?hl=en

---
You received this message because you are subscribed to the Google Groups "Chromium OS discuss" group.
To unsubscribe from this group and stop receiving emails from it, send an email to chromium-os-discuss+unsub...@chromium.org.

--
--
Chromium OS discuss mailing list: chromium-os-discuss@chromium.org

undyinglight

unread,
Feb 13, 2018, 4:28:10 PM2/13/18
to Chromium OS discuss, sammywil...@gmail.com
That is unfortunate.  Just a minor inconvenience to live with then.  Thank you for the clarification.


On Tuesday, February 13, 2018 at 1:17:45 PM UTC-8, Mike Frysinger wrote:
it is not possible to disable noexec/nodev/nosuid by design.  your only option is to remount.
-mike
On Tue, Feb 13, 2018 at 4:10 PM, undyinglight <sammywil...@gmail.com> wrote:

I am not much of a power user so please forgive me if some of my terminology is not 100% accurate in what I am trying to describe. I know that as a security measure ChromeOS prevents things like USB drives and SD Cards from running executable programs. I often use Ubuntu through Crouton for things that I do and it would make things far more convenient for me if this was possible to disable.


For example if I want to play DOTA 2 installed on an SD Card I would swap over to Ubuntu plug in the SD Card and then need to mount it via the command Line in Ubuntu by typing in something like 'sudo mount -t vfat -o defaults,nosuid,nodev /dev/mmcblk1p1 /home/ubuntu/SDcard'


Is it possible to disable this feature so that I could just plug in an SD Card and run DOTA 2 without first inputting that into the command line, or plug in a USB Drive with an exe of Blender on it without having to mount that from the command line either? This would be of massive convenience and a big time saver if I could get this working as I want it. Thank you all for your help.

--
--
Chromium OS discuss mailing list: chromium-...@chromium.org
Reply all
Reply to author
Forward
0 new messages