Indefinitely keep authorization for mounting by default isn't good

Bug #260659 reported by Stanislav German-Evtushenko
8
Affects Status Importance Assigned to Milestone
hal (Ubuntu)
Invalid
Low
Unassigned

Bug Description

Binary package hint: policykit

Under normal user in Gutsy, I am confident that I can change and only $HOME and /tmp dirs, and I cannot break my system, but in Hardy I can not be confident in this, because I could forget to turn of "remember authorization".

I suggest the default should be not to keep authorization indefinitely.

Screenshot attached.

Revision history for this message
Stanislav German-Evtushenko (giner) wrote :
Andreas Moog (ampelbein)
description: updated
Revision history for this message
Andreas Moog (ampelbein) wrote : Re: Indefinitely keep authorization by default isn't good

Thank you for taking the time to report this issue and helping to make Ubuntu better. I agree that this could impose an issue on the security so i am confirming this. Thanks again for reporting.

Changed in policykit:
status: New → Confirmed
Revision history for this message
Sense Egbert Hofstede (sense) wrote :

I agree with the reporter of this idea. Options like this should never be selected by default.

Changed in policykit:
importance: Undecided → Low
status: Confirmed → New
status: New → Confirmed
Revision history for this message
James Westby (james-w) wrote :

Hi,

policykit doesn't select what to do here, that's done by the application,
so this is actually a problem in whatever defines the policy.

I am reassigning this bug to hal, which provides the file

/usr/share/PolicyKit/policy/org.freedesktop.hal.storage.policy

Thanks,

James

Revision history for this message
dino99 (9d9) wrote :
Changed in hal (Ubuntu):
status: Confirmed → Invalid
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.