On Thu, Sep 13, 2012 at 9:42 AM, Neil Bothwick <n...@digimed.co.uk> wrote:
> On Thu, 13 Sep 2012 09:19:19 -0500, Canek Peláez Valdés wrote:
>
>> >   A normal user can pumount *WHAT THAT SAME USER* has pmounted.  Now
>> > try for a general solution.
>>
>> The general solution is using something like udisks+polkit. That is a
>> true general solution; otherwise you end up like the author of
>> calibre, with a security mess on his hands:
>>
>> https://bugs.launchpad.net/calibre/+bug/885027
>>
>> If you dismiss the security implications of sudoing pmount, because
>> you care only about *your* use cases, on *your* machine, by definition
>> that is not a "general solution".
>
> You should never need to sudo pmount, it is supposed to run as a normal
> user. Walter is using sudo to run pumount, which is nothing like the
> situation described in that bug. Even pmount avoids the situations
> described in that bug because it is only capable of operating in /media.

OK, noted. It is still not "a general solution", which is my main point.

Regards.
-- 
Canek Peláez Valdés
Posgrado en Ciencia e Ingeniería de la Computación
Universidad Nacional Autónoma de México

Reply via email to