** Changed in: deja-dup (Ubuntu) Importance: Undecided => Medium ** Changed in: deja-dup (Ubuntu) Importance: Medium => Low
** Information type changed from Public to Public Security -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to deja-dup in Ubuntu. https://bugs.launchpad.net/bugs/1079552 Title: Unexpectedly asks for authentication halfway through file restore process Status in deja-dup package in Ubuntu: Confirmed Bug description: While restoring files, after the (very long) "Preparing" step, Deja Dup seems to execute "pkexec /bin/sh …" in order to run some script as root. This is problematic for a few reasons: 1. It happens in the middle of the restore process. At best, the prompt for authentication will appear while the user is doing something else, causing confusion. At worst, the prompt will appear while the user is away from the computer expecting Deja Dup to be restoring his files. 2. When restoring a number of files (deja-dup --restore-missing) the prompt for authentication happens for each file that has been selected. Combined with #1, this means the user must babysit Deja Dup. 3. Deja Dup is running some code with full root permissions, without telling the user what that code does. This shouldn't be necessary. This authentication should be somehow replaced with a gentler, less privileged PolicyKit request, and Deja Dup should ask for authentication either as soon as possible or as late as possible so the need does not arise (repeatedly) while the application is restoring files in the background. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/deja-dup/+bug/1079552/+subscriptions -- Mailing list: https://launchpad.net/~desktop-packages Post to : desktop-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~desktop-packages More help : https://help.launchpad.net/ListHelp