gnome-mount and hal

[echo6]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

I'm trying to configure Ubuntu 8.04 to honour a read-only "policy" for
removable storage.

I have /etc/hal/fdi/policy/mountro.fdi,  with the following.
<!--
~  <device>
~    <match key="block.is_volume" bool="true">
~        <match key="@block.storage_device:storage.hotpluggable"
bool="true">
~          <merge key="volume.policy.mount_option.ro"
type="bool">true</merge>
~          <merge key="volume.policy.mount_option.noexec"
type="bool">true</merge>
~        </match>
~        <match key="@block.storage_device:storage.removable" bool="true">
~          <merge key="volume.policy.mount_option.ro"
type="bool">true</merge>
~          <merge key="volume.policy.mount_option.noexec"
type="bool">true</merge>
~        </match>
~    </match>
~  </device>
- -->

Which made no difference, in addition I added "ro" using gconf-editor
under storage for ntfs and vfat to test.  Again this has made no difference.

Ultimately what I am trying to achieve is to have a remastered livecd
based on Ubuntu 8.04 and Gnome.  I wish to boot to the desktop so that
the user is presented with icons for each partition available, including
any removable storage devices.  I want the defaut behaviour not to mount
these volumes until the user selects an icon,  and then the default
behaviour to be mount them as read-only.

So I figured I would start with a live install and try enforce read-only
policies.  As you can see I'm struggling with this!

Can some kind soul put my out of my misery and point me in the right
direction?

Regards.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFInq1YbSv1saVS9ucRAjlqAJ9BsLTxO39WlB5qqQs2dhVRBZvPuACgiWD0
v7Zw528mF7xME46cVdd/0t8=
=YqH5
-----END PGP SIGNATURE-----