I'm reviewing

  http://bazaar.launchpad.net/%7Eusb-creator-hackers/usb-
creator/trunk/revision/201

for this.

The default PK policy for the "bootloader", "format", etc. methods is
"yes", i. e. it will silently do that without authentication dialogs.
The D-BUS methods allow you to specify an arbitrary device, and call
syslinux/devicekit without further checks. Since the usb-creator backend
runs as root, this circumvents the existing dk-disks checks. Apps
shouldn't maliciously or accidentally be able to reformat/change
internal disks.

Either you need to call the dk-disks stuff as normal user from the
client side, and thus get the existing DK-disks policy checks (which
might be a bit tricky since you also need to call syslinux etc.), or you
need to mirror DK-disks' checks for removable devices, or you need to
change the default policy to auth_admin_keep.

Otherwise the changes are primarily moving existing code around into the
new d-bus wrapper.

If the policy checks get fixed, this looks fine for me, since it also
helps to get rid of gksu.

-- 
UI freeze exception for usb-creator 0.2.7
https://bugs.launchpad.net/bugs/432542
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to