[Bug 1832337] Re: Require password when starting usb-creator

[Marc Deslauriers]

This will also require usb-creator to be modified to have a single
policykit prompt.

** Also affects: usb-creator (Ubuntu)
   Importance: Undecided
       Status: New

** Changed in: usb-creator (Ubuntu)
     Assignee: (unassigned) => Ubuntu Security Team (ubuntu-security)

** Changed in: policykit-desktop-privileges (Ubuntu)
       Status: New => In Progress

** Changed in: usb-creator (Ubuntu)
       Status: New => In Progress

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to usb-creator in Ubuntu.
https://bugs.launchpad.net/bugs/1832337

Title:
  Require password when starting usb-creator

Status in policykit-desktop-privileges package in Ubuntu:
  In Progress
Status in usb-creator package in Ubuntu:
  In Progress

Bug description:
  Because usb-creator performs privileged actions, it should require
  authentication prior to starting. policykit-desktop-privileges should
  be modified so that usb-creator requires password authentication prior
  to starting.

  While it was a deliberate design decision to allow usb-creator to
  perform mounting and writing without authentication (see
  https://bugs.launchpad.net/ubuntu/+source/policykit-desktop-
  privileges/+bug/1568149), this decision should be revisited. Allowing
  the use of usb-creator without authentication presents an unnecessary
  security risk.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/policykit-desktop-privileges/+bug/1832337/+subscriptions