bindfs - https://bindfs.org/
bindfs is a FUSE filesystem for mirroring a directory to another
directory, similarly to mount --bind. The permissions of the mirrored
directory can be altered in various ways.
Some things bindfs can be used for:
- Making a directory read-only.
- Making all executables non-executable.
- Sharing a directory with a list of users (or groups).
- Modifying permission bits using rules with chmod-like syntax.
- Changing the permissions with which files are created.
Non-root users can use almost all features, but most interesting
use-cases need user_allow_other to be defined in /etc/fuse.conf.
Make sure FUSE 2.6.0 or above is installed (https://github.com/libfuse/libfuse). FUSE 3 is not yet supported.
Download a release or clone this repository.
Then compile and install as usual:
./configure
make
make install
If you want the mounts made by non-root users to be visible to other users,
you may have to add the line user_allow_other to /etc/fuse.conf.
In Linux-based OSes, you may have to add your user to the fuse group.
See the bindfs --help or the man-page for instructions and examples.
The following extra options may be useful under osxfuse:
-o local,allow_other,extended_security,noappledouble
See https://github.com/osxfuse/osxfuse/wiki/Mount-options for details.
Bindfs comes with a (somewhat brittle and messy) test suite.
The test suite has two kinds of tests: those that have to be run as root and
those that have to be run as non-root. To run all of the tests, do
make check both as root and as non-root.
The test suite requires Ruby 1.8.7+. If you're using RVM
then you may need to use rvmsudo instead of plain sudo to run the root
tests.
There is also a set of Vagrant configs for running the test suite on a variety
of systems. Run them with vagrant/test.rb (add --help for extra options).
You can destroy all bindfs Vagrant machines (but not the downloaded images)
with make vagrant-clean.
GNU General Public License version 2 or any later version. See the file COPYING.