From ae034ef584f13a7b3ddc911bdb4b99d5796a383f Mon Sep 17 00:00:00 2001
From: Christian Pointner <equinox@spreadspace.org>
Date: Fri, 11 Dec 2020 20:14:18 +0100
Subject: ws/base: hide ntfs disks

---
 roles/ws/base/templates/hide-ntfs-disks.service.j2 | 10 ++++++++++
 roles/ws/base/templates/hide-ntfs-disks.sh.j2      | 13 +++++++++++++
 2 files changed, 23 insertions(+)
 create mode 100644 roles/ws/base/templates/hide-ntfs-disks.service.j2
 create mode 100644 roles/ws/base/templates/hide-ntfs-disks.sh.j2

(limited to 'roles/ws/base/templates')

diff --git a/roles/ws/base/templates/hide-ntfs-disks.service.j2 b/roles/ws/base/templates/hide-ntfs-disks.service.j2
new file mode 100644
index 00000000..669c9d8f
--- /dev/null
+++ b/roles/ws/base/templates/hide-ntfs-disks.service.j2
@@ -0,0 +1,10 @@
+[Unit]
+Description=Hide NTFS Disks from nosy users
+
+[Service]
+Type=oneshot
+ExecStart=/usr/local/bin/hide-ntfs-disks.sh
+RemainAfterExit=yes
+
+[Install]
+WantedBy=multi-user.target
diff --git a/roles/ws/base/templates/hide-ntfs-disks.sh.j2 b/roles/ws/base/templates/hide-ntfs-disks.sh.j2
new file mode 100644
index 00000000..898e7f3b
--- /dev/null
+++ b/roles/ws/base/templates/hide-ntfs-disks.sh.j2
@@ -0,0 +1,13 @@
+#!/bin/sh
+
+MOUNT_BASE_D="/media/.ntfs"
+rm -rf "$MOUNT_BASE_D"
+mkdir -p "$MOUNT_BASE_D"
+chmod 0700 "$MOUNT_BASE_D"
+
+{% for disk in ws_base_hide_ntfs_disks %}
+
+name="$(readlink -f '{{ disk }}' | xargs basename)"
+mkdir -p "$MOUNT_BASE_D/$name"
+/bin/mount -o no_def_opts,user_id=0,group_id=0,ro "{{ disk }}" "$MOUNT_BASE_D/$name"
+{% endfor %}
-- 
cgit v1.2.3