##(see the SpecSpec for an explanation)

 * '''Launchpad Entry''': UbuntuSpec:packageselection-security-n-unprivileged-mounts
 * '''Created''':
 * '''Contributors''': 
 * '''Packages affected''':

== Summary ==

== Release Note ==

##This section should include a paragraph describing the end-user impact of this change.  It is meant to be included in the release notes of the first release in which it is implemented.  (Not all of these will actually be included in the release notes, at the release manager's discretion; but writing them is a useful exercise.)

##It is mandatory.

== Rationale ==

== User stories ==

== Assumptions ==

== Design ==


== Implementation ==

##This section should describe a plan of action (the "how") to implement the changes discussed. Could include subsections like:

== Test/Demo Plan ==

##It's important that we are able to test new features, and demonstrate them to users.  Use this section to describe a short plan that anybody can follow that demonstrates the feature is working.  This can then be used during testing, and to show off after release. Please add an entry to http://testcases.qa.ubuntu.com/Coverage/NewFeatures for tracking test coverage.

##This need not be added or completed until the specification is nearing beta.

== Unresolved issues ==

##This should highlight any issues that should be addressed in further specifications, and not problems with the specification itself; since any specification with problems cannot be approved.

== BoF agenda and discussion ==

##Use this section to take notes during the BoF; if you keep it in the approved spec, use it for summarising what was discussed and note any options that were rejected.

=== UDS Natty discussion ===

{{{
=== Support mounts by unprivileged users ===
UbuntuSpec:packageselection-security-n-unprivileged-mounts
==== Overview ====
 * at some point in the past there was a kernel patch to allow a user to
   do some restricted mounts
 * Can we allow some set of mounts
 * Can we come up with a solution to denial of service issue
 * Can we do something in Natty to get patch upstream or ...
 * there is a command line utility that does dbus calls to mount usb and such from command line
 * generally makes kees uncomfortable
==== ACTIONS ====
 * KeesCook to look more at patch and think about it more
 * SergeHallyn to follow up on dbus socket user id
}}}

----
CategorySpec