Latest Technology News,Laptop&PC Reviews,Mobile Gadgets,how to,help me,free browsing cheat,hack,tricks,blogging,do it for me, HOW TOS etc.

Advertise with us

Follow by Email


Lefkofsky Talks About the Need for More Empathy

Lefkofsky Talks About the Need for More Empathy People who have success in the realm of business innovation, like Eric Lefkofsky, may ...

How to secure files from other users on external disks

How to secure files from other users on external disks

If you use an external disk drive with OS X, you may notice that when it is mounted, it becomes available for all users on the system. Therefore, if you have files you have saved to a USB drive and you attach it to your system and you switch user accounts, those files will be viewable within the second account.
In addition, if you have network file sharing enabled, the files on this drive will be accessible to any user who logs in via the network.
This behavior may seem a bit concerning, especially for those who have set up encryption on secondary drives in hopes of preventing others from viewing their files, but this is normal behavior in OS X, and essentially means two things:
Mounted external drive in OS X
An attached and mounted drive and even private contents on it will be viewable in all user accounts.
(Credit: Screenshot by Topher Kessler/CNET)
  1. Encryption by itself is only meant to secure a drive's contents from access if the drive has been locked (ie, removed from the system, or the system shut down). It is not meant to protect one users' files from another user on the same system. While unlocking the drive is limited to those who have the password, once unlocked then all users will have access just like any other USB or Firewire drive.

    On a related note, there has been past concern about encrypted drives being easily remounted if you tell it to eject but do not detach them from the system; however, this is ultimately not a security threat. Simply do not use encryption to protect data from another account on the system, as this purpose is not its intent. Instead, only use it to prevent a thief or other third-party who you have not given access to your computer, from accessing your files.
  2. External hard drives are open to all users by default. Even though all hard drives are capable of containing permissions restrictions like any other folder on the system, for external drives OS X turns this feature off. This is primarily because permissions settings are specific to one operating system installation, so those set by one system may either not be observed by another, or be interpreted to mean something entirely different and result in improper access to the files.
If set up independently, encryption will not protect your files from other local users, and permissions may be overcome by using the drive with another system. Therefore, the way to fully secure the files on your external drive is to enable both of these features.
To do this, first enable encryption on the drive by right-clicking it in the Finder and choosing the Encrypt Drive option. Supply the password to use when prompted, and then wait for the drive to remount as an encrypted volume.
Permissions settings for external hard drives in OS X
Uncheck this box to enable observation of access permissions on the external drive. Then set specific access privileges in the list of users and groups.
(Credit: Screenshot by Topher Kessler/CNET)
Next, enable permissions observation on the drive by selecting it and pressing Command-I to get information on the drive. In the information window that appears, expand the Sharing section and click the lock to authenticate. Then uncheck the option to "Ignore Ownership on this volume."
With this setting in place, the system will now observe permissions restrictions on the drive, which you can set to permit or deny access to specific users (note that this will only work to manage access for nonadministrator accounts -- admin accounts will always be able to grant themselves access to files and folders).
By default, the drive will be owned by the account that formatted it, so you should see your username listed as the first item in the Sharing & Permissions list. Next the drive should have a group association of "staff" (underneath your username) which is the default group for all local accounts on the system. This allows you to set global permissions for accounts other than yours.
Finally, there should be an "everyone" group that encompasses all other users on the system, such as a guest user account that is not a member of the "staff" group.
At this point, you have two possible approaches for the drive. The first is to set its permissions so only you have access to it, and the second is to set it up with a subdirectory or two that is only restricted to your account, so other accounts can do the same and have their sequestered and private folders.
Single user access permissions for external drive
To only allow your account access, remove all groups and users except for your account, and set "everyone" to "no access."
(Credit: Screenshot by Topher Kessler/CNET)
Single-user access
To set the drive so only you have access, in the Sharing & Permissions section of the information window, choose "no access" for the "staff" group (or simply select and remove this group altogether). Then set the "everyone" group to likewise have "no access."
When finished, click the small gear menu and select the option to apply these settings to all enclosed items (this step is not needed on an empty drive).
At this point the entire drive will be a private, detachable folder for your account. Even though it will show up as a device in other accounts on the system, if they try to access it then they will be given a "permission denied" error.
Multi-user access permissions for external drive
To allow multiple users to read the drive, set the "staff" permissions accordingly. If you set it to "Read Only" (so the top level of the drive cannot be modified) then be sure to put a folder on the drive, and set its permissions so each user can read it. Additionally, be sure to set "everyone" to have no access.
(Credit: Screenshot by Topher Kessler/CNET)
Multiuser access
To set the drive up so other users have access, leave the drive's permissions as their default so the "staff" group is intact and has full read and write permissions. Then open the drive in the Finder and create a folder on it to store your files. Now get information on this folder and set it so only your account is in the Sharing & Permissions list, with "read & write" access, and with all others set to "no access."
From here, your account will be able to view the files in this folder, but other accounts will not.
As an additional security measure, you can set up a similar folder for each account on the system, and when finished get information on the drive itself and set the "staff" group to "read only" permissions (do not use the gear menu's option to apply permissions to enclosed items). With this setup, when another user opens the drive, they will only be able to drag items to their specific folder, and neither to another user's folder nor to the top level of the drive.
Regardless of the approach you use, at this point you will have a drive that has secured resources from other users, and one that is also encrypted and thereby protected from someone attempting to override the permissions settings by attaching it to another computer.

1 comment:

FOLLOW US ON FACEBOOK: Ehijoshuatechblog
:::. Please dont leave here without dropping a comment and feel free to Share/Like this Tutorial to your friends outside there .:::

Popular search

Advertise with us

Popular Posts All time

Search the web

Submit Guest Post

Submit Guest Post
Hello we are EJTB we accept sponsored post

Popular Posts

Sponsored advert

Sponsored advert
Send FREE Bulk SMS Text Messages to Mobile Phones

Readers Online

Advertise here

Advertise here
I can help you promote your offline/online business, start-up, seminar etc to my targeted blog readers and you will get a good value for your money.

About Me




. The latest software update 1 free browsing cheat 1 REVIEW 32nd 3D 7 PRO APPLE BLACK 4G 5 Mobile Marketing Tips 50GB on MTN 9MOBILE actificial afrideals airtel Airtel Night Plan Data Airtel Unlimited Surfing Airtel Unlimited Surfing With N0.0 Airtel Unlimited Surfing With N0.0 Via Psiphon Alcatel Go Play 4G LTE and and HOW TO'S visit and iPhone 6s. and Text Messages and Xperia L3 leaks online Android Android 2.1 Android 2.2 Android 2019 Android 6.0 Marshmallow Android 7.0 Android games without WIFI Android IMEI to BB IMEI + HTC Androids Android Phones ANDROID TUTORIAL APPLE APPLE CLEARS UP DATA PRIVACY CONCERNS IN IOS 10 Apple has released iOS 11.0.3 Apple Watch Series 3 article ATTRACTIVE 4G LTE PLANS. babies bendable phone Best Offline Shooting Games For Android Birthday bitcoin BITTORRENT Blackberry Blogger Template BLOGGING BLOGGING TUTORIALS BlogSpot Blogging Platform Browsing Tips Bulk SMS bulksms by Andy Rubin Calculator Using HTML Caller Tunes Business Calls Camon C9 most powerful features and review Can You Really Make Money Flipping Houses? Celcom’s revised FIRST postpaid plans win some features Celebrates china Chrome cooking games for Android CSS & Javascript detail the Galaxy Note 8's rumoured specs Disable Windows Updates in Windows 10 all Versions Permanently Doogee Bigboy DG600 DroidVPN Duo ehijoshua jokes Enjoying Unlimited Free Browsing On PC etisalat etisalat BB10 unlimited surfing Etisalat Bblite Unlimted Plan Etisalat Night Data Plan etisalate facebook Facebook CEO Family Locator Apps FD-LTE bands Firefox Five Easy Ways To Save Your [Mobile & Computer] Data for iPhone for iPhone 7 For latest Technology News Free Browsing Garanntor? get a Caller tune set up for your in Nigeria Gionee M5 plus giveaway free cracked glo Glo Bis Glo Bis 3GB of 1K Glo Free Browsing Glo jollific8 Google Docs Google Pixel 2 Google Pixel 2 and Pixel 2 XL GTBank Virtual MasterCard GUST POST Hackers Health Sciences His home’s audio system Hot Glo Unlimited Free Browsing For december 2018 Hot S X521 how to How To Create A Free Blog HUAWEI HUB8.COM i1s i2 IFTTT includes bug fixes Infinix Hot S Infinix HotNote X551 Infinix Note 3 Pro X537 Infinix Note 3 X601 Infinix Zero 4 Innjoo i1 instagram Instagram Stories Install / Flash ClockworkMod Recovery Install two Facebook Apps in a Single Android Phone. No root required. Investment Plan for Retirement ios iPad iPhone 3GS/iOS 6 iphone 7 iphone 8 iPhone X iPhone X issues iPhone X vs Galaxy Note 8 IPTV jamb Jumia keyboard Laptop&PC Reviews LeEco Lefkofsky LG LG V20 LG V30 Full lose some love love message Make Free Calls Make Money From Home Make Money Gaming Online MAKING MONEY IN NAIJA MAKING MONEY ONLINE Mark Zuckerberg Metlife eService Insurance missingring MOBILE Mobile Gadgets MOBILE PHONES ORANGEVODAFONEO2EET-MOBILETHREEVIRGINIOSAPPLE IPHONE X Moto E3 MOTOROLA Mtn MTN Android One data plan MTN BBLITED MTN Data MTN Give Away Data Plan of 7GB For Just N2000 MTN Sudan MTN Unlimited new iPhone New Working Setting For Glo N0.00 Unlimited Free Browsing newbulksms newbulksms nigeria ng nigeria Nigeria: Airtel reduces data tariffs Nintendo 64 (N64) Emulators For Android Nintendo 64 (N64) Emulators For PC Nokia 8 Nokia 8 Key Specifications NOKIA 8 SPECIFICATION NOKIA 9 COMPLETE SPECIFICATION NOKIA 9 CURVED SCREEN Nokia Edge 2017 Nokia S40 Nokia Symbian S60 ntel Launches Fastest Router In Nigeria Offline Games 2019 Offline RPG Games for Android OgbongeBlog Blogger Template ONEPLUS OnePlus 5T Online Transactions Pepsi P1S 4G perfect Android phone phone PHONES Plus Pokemon Go ps4 QUESTRA. INVEST TODAY! Razer READ MORE ABOUT relationship REVIEWS Root an Android Device Rooting Samsung Galaxy Note 4 Safari SamMobile SAMSUNG Samsung Galaxy J7 + plus Samsung Galaxy Note 4 Samsung Galaxy Note 7 Specs & Price Samsung Galaxy Note 8 Samsung Galaxy Note 8 release date Samsung Galaxy S10 Samsung's UI screenshot on your Mac Seven Things Your ATM Card Can Do Social network Sony Xperia 1 Sponsored Study in Cyprus SUBMIT GUEST POST TD-LTE TECNO CAMON C9 Template the easy way The Essential Phone The Nokia 8 will get a bigger brother dubbed the Nokia 9 - Nokia 9 Release STILL Happening; It's a Phablet Version of Nokia 8 (check it out like i comment and share ) The Prices Of The Newly Launched Gionee M6 And M6 Plus Will Surprise You TIPS to Block Spam Top 10 Best Web Browsers For PC Top 20 Apps Tweak IMEI of Infinix Hot X507 Twitter unity bank plc Unlimited Free Browsing Unlimited Free Data Bundle vpn web hosting What Is Sonos? Whatsapp Whatsapp to Disconnect Symbian OS from the Whataapp network by December Whiteboard Sketch Video Whogohost Why Sonos? Wiko Wiko Bloom Windows 10 marks 1 year today and free upgrade expired Windows Phone 7.1 WordPress WORLDPRESS Write For Us Xiaomi Mi A1 Android One Specs Xiaomi Mi Note 2 Pro Xiaomi Redmi Note 5A Xperia 10 Xperia 10 Plus XPERIA Cars Road Trip YES 4G LTE PREPAID YOUR OPINION!! Which Nigerian Internet Service Provider Has The Most Friendly & Cheap Data Plans? YouTube zain