pcmanfm mounts the drives without requesting the root even if "nouser" option in fstab is applied

Bug #1580918 reported by DewayneMcneil
256
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Lubuntu Software Center
Invalid
Undecided
Unassigned
pcmanfm (Ubuntu)
Invalid
Undecided
Unassigned

Bug Description

I using Lubuntu 16.04 distro.

The string from my fstab:
UUID=e7b056ce-84f9-4401-bbe9-dbf5b19f7322 /media/user/bighome ext4 nouser,noauto 0 2

$ mount /media/user/bighome/
mount: only root can mount UUID=e7b056ce-84f9-4401-bbe9-dbf5b19f7322 on /media/user/bighome

It looks good, but somehow we still can mount it from pcmanfm with one click.

And I am not sure that is pcmanfm bug.

ProblemType: Bug
DistroRelease: Ubuntu 16.04
Package: pcmanfm 1.2.4-1
ProcVersionSignature: Ubuntu 4.4.0-22.39-generic 4.4.8
Uname: Linux 4.4.0-22-generic x86_64
ApportVersion: 2.20.1-0ubuntu2
Architecture: amd64
Config_pcmanfm_System_Lubuntu: Error: [Errno 2] Нет такого файла или каталога: '/etc/xdg/pcmanfm/Lubuntu/lubuntu.conf'
CurrentDesktop: LXDE
Date: Thu May 12 11:17:44 2016
InstallationDate: Installed on 2016-05-10 (1 days ago)
InstallationMedia: Lubuntu 16.04 LTS "Xenial Xerus" - Release amd64 (20160420.1)
SourcePackage: pcmanfm
Udisks_dump: Error: [Errno 2] Нет такого файла или каталога: 'udisks'
UpgradeStatus: No upgrade log present (probably fresh install)

Revision history for this message
DewayneMcneil (pqdqbfa5s78c) wrote :
summary: pcmanfm mounts the drives without requesting the root even if "nouser"
- option in fstab applied
+ option in fstab is applied
tags: added: lubuntu pcmanfm
information type: Private Security → Public Security
Revision history for this message
Marc Deslauriers (mdeslaur) wrote :

pcmanfm uses libfm to mount the volume. libfm in turn uses GVolume, which in turn uses Udisks.

Udisks on Ubuntu ships with a policykit file that allows users in the sudo group to mount local disks without asking for root privileges.

See the policy file here:
/var/lib/polkit-1/localauthority/10-vendor.d/com.ubuntu.desktop.pkla

I am closing this bug since this works as intended. Thanks!

Changed in pcmanfm (Ubuntu):
status: New → Invalid
Changed in lubuntu-software-center:
status: New → Invalid
To post a comment you must log in.
This report contains Public Security information  
Everyone can see this security related information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.