startup-disk-creator will not ask for authentication

[ventrical]

Startup Disk Creator has stopped asking me for authentication. This is a serious bug.

ProblemType: Bug
DistroRelease: Ubuntu 16.04
Package: usb-creator-gtk 0.3.2
ProcVersionSignature: Ubuntu 4.4.0-18.34-generic 4.4.6
Uname: Linux 4.4.0-18-generic x86_64
ApportVersion: 2.20.1-0ubuntu1
Architecture: amd64
CurrentDesktop: XFCE
Date: Fri Apr 8 17:27:37 2016
InstallationDate: Installed on 2015-02-28 (405 days ago)
InstallationMedia: Ubuntu 15.04 "Vivid Vervet" - Alpha amd64 (20150219)
SourcePackage: usb-creator
UpgradeStatus: No upgrade log present (probably fresh install)

[Launchpad Janitor (janitor)]

Status changed to 'Confirmed' because the bug affects multiple users.

[Marc Deslauriers (mdeslaur)]

The policykit-desktop-privileges package was changed in 2011 to allow writing images without a password:

policykit-desktop-privileges (0.7) oneiric; urgency=low

  * Allow local admins to do the less harmful usb-creator actions (mounting
    and writing image) without a password.
 -- Martin Pitt <email address hidden> Wed, 06 Jul 2011 10:12:36 +0200

The user still needs to be in the admin group.

Is this no longer sufficient?

[ventrical (dale-f-beaudoin)]

This is news to me. In every version of ubuntu, when using startup disk creator, I have always been asked for a password until today. So it is a surprise and, as would probably anyone, would suspect it as a security vulnerability.

________________________________________
From: <email address hidden> <email address hidden> on behalf of Marc Deslauriers <email address hidden>
Sent: April 8, 2016 7:43 PM
To: <email address hidden>
Subject: [Bug 1568149] Re: startup-disk-creator will not ask for authentication

The policykit-desktop-privileges package was changed in 2011 to allow
writing images without a password:

policykit-desktop-privileges (0.7) oneiric; urgency=low

  * Allow local admins to do the less harmful usb-creator actions (mounting
    and writing image) without a password.
 -- Martin Pitt <email address hidden> Wed, 06 Jul 2011 10:12:36 +0200

The user still needs to be in the admin group.

Is this no longer sufficient?

** Package changed: usb-creator (Ubuntu) => policykit-desktop-privileges
(Ubuntu)

--
You received this bug notification because you are subscribed to the bug
report.
https://bugs.launchpad.net/bugs/1568149

Title:
  startup-disk-creator will not ask for authentication

Status in policykit-desktop-privileges package in Ubuntu:
  Confirmed

Bug description:
  Startup Disk Creator has stopped asking me for authentication. This is
  a serious bug.

  ProblemType: Bug
  DistroRelease: Ubuntu 16.04
  Package: usb-creator-gtk 0.3.2
  ProcVersionSignature: Ubuntu 4.4.0-18.34-generic 4.4.6
  Uname: Linux 4.4.0-18-generic x86_64
  ApportVersion: 2.20.1-0ubuntu1
  Architecture: amd64
  CurrentDesktop: XFCE
  Date: Fri Apr 8 17:27:37 2016
  InstallationDate: Installed on 2015-02-28 (405 days ago)
  InstallationMedia: Ubuntu 15.04 "Vivid Vervet" - Alpha amd64 (20150219)
  SourcePackage: usb-creator
  UpgradeStatus: No upgrade log present (probably fresh install)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/policykit-desktop-privileges/+bug/1568149/+subscriptions

[sudodus (nio-wiklund)]

Marc D. wrote, 'The user still needs to be in the admin group.' I did not realize this. It keeps the least responsible people away from using it, so maybe this is enough :-)

[ventrical (dale-f-beaudoin)]

Marc,

 My apologies for this false flag. it has been a while since I have used SDC in more recent versions. (I still use SDC from 10.10 every once in a while).
I just tired it on another install and it does not ask for password.

regards..

dale

________________________________________
From: <email address hidden> <email address hidden> on behalf of Marc Deslauriers <email address hidden>
Sent: April 8, 2016 7:43 PM
To: <email address hidden>
Subject: [Bug 1568149] Re: startup-disk-creator will not ask for authentication

The policykit-desktop-privileges package was changed in 2011 to allow
writing images without a password:

policykit-desktop-privileges (0.7) oneiric; urgency=low

  * Allow local admins to do the less harmful usb-creator actions (mounting
    and writing image) without a password.
 -- Martin Pitt <email address hidden> Wed, 06 Jul 2011 10:12:36 +0200

The user still needs to be in the admin group.

Is this no longer sufficient?

** Package changed: usb-creator (Ubuntu) => policykit-desktop-privileges
(Ubuntu)

--
You received this bug notification because you are subscribed to the bug
report.
https://bugs.launchpad.net/bugs/1568149

Title:
  startup-disk-creator will not ask for authentication

Status in policykit-desktop-privileges package in Ubuntu:
  Confirmed

Bug description:
  Startup Disk Creator has stopped asking me for authentication. This is
  a serious bug.

  ProblemType: Bug
  DistroRelease: Ubuntu 16.04
  Package: usb-creator-gtk 0.3.2
  ProcVersionSignature: Ubuntu 4.4.0-18.34-generic 4.4.6
  Uname: Linux 4.4.0-18-generic x86_64
  ApportVersion: 2.20.1-0ubuntu1
  Architecture: amd64
  CurrentDesktop: XFCE
  Date: Fri Apr 8 17:27:37 2016
  InstallationDate: Installed on 2015-02-28 (405 days ago)
  InstallationMedia: Ubuntu 15.04 "Vivid Vervet" - Alpha amd64 (20150219)
  SourcePackage: usb-creator
  UpgradeStatus: No upgrade log present (probably fresh install)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/policykit-desktop-privileges/+bug/1568149/+subscriptions