Sorry to ask again but is there some specific area of code that you'd
like to be reviewed more carefully? I think I found at least a few
security bugs. For example it does not check that the file that the user
wants to write to the USB stick is actually something that the user can
normally access. This means you can tell it to write /etc/shadow to your
USB stick.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1000268

Title:
  please consider letting non-admins create ubuntu installation USB
  stick

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/usb-creator/+bug/1000268/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to