Access Handling and Security
By default, files and directories are owned by the effective user and
group of the mounting process and everybody has full read, write, exe‐
cution and directory browsing permissions. If you want to use permis‐
sions handling then use the uid and/or the gid options together with
the umask, or fmask and dmask options.
Windows users have full access to the files created by ntfs-3g.
If ntfs-3g is set setuid-root then non-root users will be also able to
mount block devices or via /etc/fstab if the ’user’ or ’users’ mount(8)
option is specified. The ntfs-3g process drops the root privilege after
successful mount and runs unprivileged afterwards.