On Thu, 13 Sep 2012 09:19:19 -0500, Canek Peláez Valdés wrote:

> >   A normal user can pumount *WHAT THAT SAME USER* has pmounted.  Now
> > try for a general solution.  
> 
> The general solution is using something like udisks+polkit. That is a
> true general solution; otherwise you end up like the author of
> calibre, with a security mess on his hands:
> 
> https://bugs.launchpad.net/calibre/+bug/885027
> 
> If you dismiss the security implications of sudoing pmount, because
> you care only about *your* use cases, on *your* machine, by definition
> that is not a "general solution".

You should never need to sudo pmount, it is supposed to run as a normal
user. Walter is using sudo to run pumount, which is nothing like the
situation described in that bug. Even pmount avoids the situations
described in that bug because it is only capable of operating in /media.


-- 
Neil Bothwick

A man wrapped up in himself makes a very small package.

Attachment: signature.asc
Description: PGP signature

Reply via email to