[Bug 771553] Re: usb-creator-helper allows any user to umount any filesystem

[Mario Limonciello]

This has a negative side effect that in the process of writing a USB
disk you are now asked several times to enter a password.  Can this be
cached?

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to usb-creator in Ubuntu.
https://bugs.launchpad.net/bugs/771553

Title:
  usb-creator-helper allows any user to umount any filesystem

Status in “usb-creator” package in Ubuntu:
  Fix Released

Bug description:
  Binary package hint: usb-creator-common

  /usr/share/usb-creator/usb-creator-helper exposes a method called
  UnmountFile over D-Bus which passes its argument directly to umount.

  This lets any user unmount an arbitrary filesystem by running
  something like:

  dbus-send --system --type=method_call --print-reply
  --dest=com.ubuntu.USBCreator /com/ubuntu/USBCreator
  com.ubuntu.USBCreator.UnmountFile string:/boot

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/usb-creator/+bug/771553/+subscriptions