Comment 4 for bug 1568149

This is news to me. In every version of ubuntu, when using startup disk creator, I have always been asked for a password until today. So it is a surprise and, as would probably anyone, would suspect it as a security vulnerability.

________________________________________
From: <email address hidden> <email address hidden> on behalf of Marc Deslauriers <email address hidden>
Sent: April 8, 2016 7:43 PM
To: <email address hidden>
Subject: [Bug 1568149] Re: startup-disk-creator will not ask for authentication

The policykit-desktop-privileges package was changed in 2011 to allow
writing images without a password:

policykit-desktop-privileges (0.7) oneiric; urgency=low

  * Allow local admins to do the less harmful usb-creator actions (mounting
    and writing image) without a password.
 -- Martin Pitt <email address hidden> Wed, 06 Jul 2011 10:12:36 +0200

The user still needs to be in the admin group.

Is this no longer sufficient?

** Package changed: usb-creator (Ubuntu) => policykit-desktop-privileges
(Ubuntu)

--
You received this bug notification because you are subscribed to the bug
report.
https://bugs.launchpad.net/bugs/1568149

Title:
  startup-disk-creator will not ask for authentication

Status in policykit-desktop-privileges package in Ubuntu:
  Confirmed

Bug description:
  Startup Disk Creator has stopped asking me for authentication. This is
  a serious bug.

  ProblemType: Bug
  DistroRelease: Ubuntu 16.04
  Package: usb-creator-gtk 0.3.2
  ProcVersionSignature: Ubuntu 4.4.0-18.34-generic 4.4.6
  Uname: Linux 4.4.0-18-generic x86_64
  ApportVersion: 2.20.1-0ubuntu1
  Architecture: amd64
  CurrentDesktop: XFCE
  Date: Fri Apr 8 17:27:37 2016
  InstallationDate: Installed on 2015-02-28 (405 days ago)
  InstallationMedia: Ubuntu 15.04 "Vivid Vervet" - Alpha amd64 (20150219)
  SourcePackage: usb-creator
  UpgradeStatus: No upgrade log present (probably fresh install)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/policykit-desktop-privileges/+bug/1568149/+subscriptions