Ok, my concept of security encompasses *all* the data that the user has
access to, whether connected via internal storage or external storage so
that is why I considered this a "Security Vulnerability", obviously that
is not the commonly accepted definition in this domain.

I sort of find it amusing that an External storage device may well have
various file system permission settings to prevent users from
writing/deleting data, but apparently it is accepted that they can still
format the entire device anyway.......

Anyway, I created a new user with standard "Desktop User" privileges,
logged in as that user, inserted a USB drive and was able to format that
drive without any request for further authorisation.

I do not believe any formatting tools were available in previous Ubuntu
releases that did not require sudo authorisation to run, so that is why
I consider this new functionality to be a security issue.

I will investigate the Policykit option.

-- 
Non-admin users can format removable media
https://bugs.launchpad.net/bugs/595825
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to