[Bug 1832337] Re: Require password when starting usb-creator

[Launchpad Bug Tracker]

This bug was fixed in the package policykit-desktop-privileges - 0.21

---------------
policykit-desktop-privileges (0.21) eoan; urgency=medium

  * Don't allow usb-creator to overwrite devices without authentication.
    (LP: #1832337)

 -- Marc Deslauriers <marc.deslauriers at ubuntu.com>  Tue, 18 Jun 2019
13:56:08 -0400

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to usb-creator in Ubuntu.
https://bugs.launchpad.net/bugs/1832337

Title:
  Require password when starting usb-creator

Status in policykit-desktop-privileges package in Ubuntu:
  Fix Released
Status in usb-creator package in Ubuntu:
  Fix Released

Bug description:
  Because usb-creator performs privileged actions, it should require
  authentication prior to starting. policykit-desktop-privileges should
  be modified so that usb-creator requires password authentication prior
  to starting.

  While it was a deliberate design decision to allow usb-creator to
  perform mounting and writing without authentication (see
  https://bugs.launchpad.net/ubuntu/+source/policykit-desktop-
  privileges/+bug/1568149), this decision should be revisited. Allowing
  the use of usb-creator without authentication presents an unnecessary
  security risk.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/policykit-desktop-privileges/+bug/1832337/+subscriptions