Ubuntu 10.04 is ignoring devicefile permissions and allowing unprivileged users full access to, e.g., plug-in media like USB drives. This is a significant security problem because, as the original reporter notes, the normal GUI control panel for defining user accounts implies that one can control a user's access rights by setting or clearing checkboxes (which add/remove the user from the corresponding groups).
So how exactly is this "not really a bug"??? I would have classified it as a CRITICAL issue, arguably worth delaying the Ubuntu release... or, at a minimum, a warning should have been very prominently included in the release notes. NB: I've tried to work around this by creating udev rules, but to no avail: the permissions on devicefiles either get ignored or changed by something else. If I can't find a solution it may be necessary to completely disable USB and optical disk support on one of my company's networks. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/601111 Title: gnome doesn't care about group permissions (device access) -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
