Filesystem mount options

There are many mount options, some security related.

nosuid - Do not allow any setXid programs to be run on this filesystem.
noexec - Do not allow any programs at all to be run on this filesystem.
nodev - Don't honor device files on this filesystem
ro - mount filesystem read-only
rw - mount filesystem read/write
encryption - for mounting encrypted filesystems
noatime - Don't update atime on files
noauto - do not mount this filesystem when 'mount -a' called
sync - Use synchronous I/O
mand - Mandatory locking (more later)
user - allow a non-root user to mount/unmount the filesystem. (implies noexec,nosuid,nodev)
users - same as user, but any user can umount.