ws/base: hide ntfs disks

2 files changed, 23 insertions, 0 deletions

diff --git a/roles/ws/base/templates/hide-ntfs-disks.service.j2 b/roles/ws/base/templates/hide-ntfs-disks.service.j2
new file mode 100644
index 00000000..669c9d8f
--- /dev/null
+++ b/roles/ws/base/templates/hide-ntfs-disks.service.j2
@@ -0,0 +1,10 @@
+[Unit]
+Description=Hide NTFS Disks from nosy users
+
+[Service]
+Type=oneshot
+ExecStart=/usr/local/bin/hide-ntfs-disks.sh
+RemainAfterExit=yes
+
+[Install]
+WantedBy=multi-user.target
diff --git a/roles/ws/base/templates/hide-ntfs-disks.sh.j2 b/roles/ws/base/templates/hide-ntfs-disks.sh.j2
new file mode 100644
index 00000000..898e7f3b
--- /dev/null
+++ b/roles/ws/base/templates/hide-ntfs-disks.sh.j2
@@ -0,0 +1,13 @@
+#!/bin/sh
+
+MOUNT_BASE_D="/media/.ntfs"
+rm -rf "$MOUNT_BASE_D"
+mkdir -p "$MOUNT_BASE_D"
+chmod 0700 "$MOUNT_BASE_D"
+
+{% for disk in ws_base_hide_ntfs_disks %}
+
+name="$(readlink -f '{{ disk }}' | xargs basename)"
+mkdir -p "$MOUNT_BASE_D/$name"
+/bin/mount -o no_def_opts,user_id=0,group_id=0,ro "{{ disk }}" "$MOUNT_BASE_D/$name"
+{% endfor %}