Your message dated Sat, 30 Jan 2016 20:33:13 +0100
with message-id <[email protected]>
and subject line Re: Bug#751892: udev: external media belong to disk group
has caused the Debian Bug report #751892,
regarding udev: external media belong to disk group
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)


-- 
751892: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=751892
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: udev
Version: 204-10
Severity: normal

Dear Maintainer,

since some Debian specific rules (91-permissions.rules?) have been dropped from
udev, external media (USB, firewire, SD-card) belong to disk group:

user@debian:~$ ls -l /dev/sd* /dev/mmc*
brw-rw---- 1 root disk 179,  0 juin  16 23:51 /dev/mmcblk0
brw-rw---- 1 root disk 179,  1 juin  16 23:51 /dev/mmcblk0p1
brw-rw---- 1 root disk   8,  0 juin  16 23:33 /dev/sda
brw-rw---- 1 root disk   8,  1 juin  16 23:33 /dev/sda1
brw-rw---- 1 root disk   8, 16 juin  16 23:40 /dev/sdb

This makes the default user is unable to modify the removable devices.
This means that only privileged users can dd a disk image on a USB stick, or
fully erase its content, or install a bootloader on it, and so on. CD/DVD
disks belong to 'cdrom' group, allowing default user to burn them from
commandline interface. Why shouldn't be the case for other removable media?

Knowing that the default user created during installation is member of
secondary groups 'floppy' and 'plugdev', and knowing that making this user a
member of the 'disk' group will only lead to security issues, wouldn't be
possible to (re)introduce specific rules to manage external/removable devices
differently than the internal ones, and make them readable and writable by any
member of 'floppy' or 'plugdev'? Or is there a plan to work around this issue?

Thanks
quidame


-- System Information:
Debian Release: jessie/sid
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i686)

Kernel: Linux 3.14-1-486
Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages udev depends on:
ii  debconf [debconf-2.0]  1.5.53
ii  libacl1                2.2.52-1
ii  libblkid1              2.20.1-5.8
ii  libc6                  2.19-1
ii  libkmod2               17-2
ii  libselinux1            2.3-1
ii  libudev1               204-10
ii  lsb-base               4.1+Debian13
ii  procps                 1:3.3.9-5
ii  util-linux             2.20.1-5.8

udev recommends no packages.

udev suggests no packages.

-- debconf information:
  udev/reboot_needed:
  udev/new_kernel_needed: false
  udev/title/upgrade:
  udev/sysfs_deprecated_incompatibility:

--- End Message ---
--- Begin Message ---
On Mon, 30 Mar 2015 00:01:09 +0200 Michael Biebl <[email protected]> wrote:
> Am 29.03.2015 um 23:46 schrieb Troy Benjegerdes:
> > 
> > What exactly the issue with this change? If I am not going to get
> > the old behavior of removable USB disks owned by 'floppy', can 
> > someone at least bother to explain why it was changed, or when 
> > it will be fixed?
> 
> There is nothing to be fixed, really.
> 
> As I mentioned in previous reply, desktops should use udisks2 to manage
> storage devices.
> 
> The default policy shipped in Debian allows local desktop users to
> mount/umount/format etc removable media.
> 
> For internal media, admin privileges are necessary, which you configure
> via PolicyKit.

I'm going to close this bug report. The removal of the floppy group was
an intentional change and this change won't be reverted.

As outlined, this is also not an issue on modern desktops which use
udisks2. I understand that there is a demand for a CLI utility which
makes use of udisks2, but this is out-of-scope for this bug report and
not specific, #781495 could be a starting point.


-- 
Why is it that all of the instruments seeking intelligent life in the
universe are pointed away from Earth?

Attachment: signature.asc
Description: OpenPGP digital signature


--- End Message ---

Reply via email to