This will also require usb-creator to be modified to have a single
policykit prompt.
** Also affects: usb-creator (Ubuntu)
Importance: Undecided
Status: New
** Changed in: usb-creator (Ubuntu)
Assignee: (unassigned) => Ubuntu Security Team (ubuntu-security)
** Changed in: policykit-desktop-privileges (Ubuntu)
Status: New => In Progress
** Changed in: usb-creator (Ubuntu)
Status: New => In Progress
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to policykit-desktop-
privileges in Ubuntu.
https://bugs.launchpad.net/bugs/1832337
Title:
Require password when starting usb-creator
Status in policykit-desktop-privileges package in Ubuntu:
In Progress
Status in usb-creator package in Ubuntu:
In Progress
Bug description:
Because usb-creator performs privileged actions, it should require
authentication prior to starting. policykit-desktop-privileges should
be modified so that usb-creator requires password authentication prior
to starting.
While it was a deliberate design decision to allow usb-creator to
perform mounting and writing without authentication (see
https://bugs.launchpad.net/ubuntu/+source/policykit-desktop-
privileges/+bug/1568149), this decision should be revisited. Allowing
the use of usb-creator without authentication presents an unnecessary
security risk.
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/policykit-desktop-privileges/+bug/1832337/+subscriptions
--
Mailing list: https://launchpad.net/~touch-packages
Post to : [email protected]
Unsubscribe : https://launchpad.net/~touch-packages
More help : https://help.launchpad.net/ListHelp
