[Bug 1832337] Re: Require password when starting usb-creator

[Bib]

IIUC, when anyone who plugs a removable USB stick in a PC it is mounted
in /media/<user>/<label> and, as long as the FS in the device does not
support privileges attributes (e.g. FAT32), anyone is granted the rights
to overwrite anything (but partitions ?) in the device. So I don't see
why anyone would be bored with  authentication for this task. Let me
know if I forget something.

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to usb-creator in Ubuntu.
https://bugs.launchpad.net/bugs/1832337

Title:
  Require password when starting usb-creator

Status in policykit-desktop-privileges package in Ubuntu:
  Fix Released
Status in usb-creator package in Ubuntu:
  Fix Released

Bug description:
  Because usb-creator performs privileged actions, it should require
  authentication prior to starting. policykit-desktop-privileges should
  be modified so that usb-creator requires password authentication prior
  to starting.

  While it was a deliberate design decision to allow usb-creator to
  perform mounting and writing without authentication (see
  https://bugs.launchpad.net/ubuntu/+source/policykit-desktop-
  privileges/+bug/1568149), this decision should be revisited. Allowing
  the use of usb-creator without authentication presents an unnecessary
  security risk.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/policykit-desktop-privileges/+bug/1832337/+subscriptions