Forensic Cop Journal Volume 1(3), Oct 2009
Before configuring /etc/fstab, firstly some subdirectories are made in the directory /mediaas mounting points of flash disk when it is attached to the experimental machine. In /media,there are 7 new subdirectories made, namely:
The reason why the number of new subdirectories is 7 is in order to cover the number of partitions in one hard disk. It usually has 2 to 4 partitions. fstab containing descriptive staticinformation about the file systems is only read by programs, and not written. Each linedescribing file system on separated partition comprises 6 fields, namely file system, mountpoint, type, options, dump and pass. Below is revised configuration in /etc/fstab which isedited using Text Editor.
/dev/sdb1 /media/sdb1ro auto noauto,user,ro,nosuid,nodev,uhelper=hal 0 0
/dev/sdb2 to /dev/sdb7 have same configuration as /dev/sdb1, except mount point, forinstance /dev/sdb2 has /media/sdb2ro as location of mounting. Below is the explanation of selected configuration quoted from manual pages of mount and umount.
: mount will try to guess the desired type of file system.
: it can only be mounted explicitly.
: only the user that mounted a file system can umount it again.
: mount the file system read only
: do not allow set-user-identifier or set-group-identifier bits to take effect.
: do not interpret character or block special devices on the file system.
: The uhelper (unprivileged umount helper) is possible to used when non-rootuser wants to umount a mountpoint which is not defined in the /etc/fstab file (e.g devicesmounted by HAL).After this configuration finished, it was saved in /etc/fstab.