Policykit does not restrict non-admin users from formatting USB devices via Nautilus

[David Clayton]

Binary package hint: policykit

I have reported a bug that since 10.04 Nautilus now allows non-admin users to format USB storage devices without requiring any authentication (https://bugs.launchpad.net/ubuntu/+source/nautilus/+bug/595825).

I have been advised to create a Policykit bug to see if this is firstly considered an issue that needs addressing and then (hopefully) do something about it in conjunction with the Nautilus maintainers. I have no issue with admin rights users being able to format devices, but there seems no way to restrict non-admin users from having this potentially destructive power.

I created a new user with standard "Desktop User" privileges, logged in as that user, inserted a USB drive and was able to format that drive without any request for further authorisation.

I do not believe any formatting tools were available in previous Ubuntu releases that did not require sudo authorisation to run, so that is why I consider this new functionality to be an issue.

ProblemType: Bug
DistroRelease: Ubuntu 10.04
Package: policykit (not installed)
ProcVersionSignature: Ubuntu 2.6.32-23.37-generic 2.6.32.15+drm33.5
Uname: Linux 2.6.32-23-generic x86_64
NonfreeKernelModules: fglrx
Architecture: amd64
Date: Fri Jun 18 19:10:53 2010
InstallationMedia: Ubuntu 10.04 "Lucid Lynx" - Alpha amd64 (20100308)
ProcEnviron:
 LANG=en_AU.utf8
 SHELL=/bin/bash
SourcePackage: policykit

[dino99 (9d9)]

Closing that outdated report as EOL has been reached long time ago