desktop-packages team mailing list archive

[Fred <882862@xxxxxxxxxxxxxxxxxx>]

No, if the guest plugs in his or her own USB flash memory then it should
be readable and writeable by the guest.

The problem is that the guest can read, write and erase the data on the system if the disk partitions are mounted.
Disk partitions gets mounted in subdirectories of /media, and they're both readable and writeable by the guest.

Exempt from /etc/fstab
/dev/sdb1       /media/Windows  ntfs-3g    quiet,defaults,locale=en_US.utf8,umask=0	0 0
/dev/sdb5       /media/Music    ntfs-3g    quiet,defaults,locale=en_US.utf8,umask=0	0 0
/dev/sdb6       /media/Movies    ntfs-3g    quiet,defaults,locale=en_US.utf8,umask=0	0 0

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to lightdm in Ubuntu.
https://bugs.launchpad.net/bugs/882862

Title:
  Guest account can read/write in /media/

Status in “lightdm” package in Ubuntu:
  Incomplete

Bug description:
  The guest account can everything under /media/.
  Is the guest account really supposed to be able to access and read all the files on the host computer?

  If yes, then is the guest account really really supposed to be able to write to /media/ ?
  Shouldn't the guest be limited to his temporary home in /tmp/ ?

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/lightdm/+bug/882862/+subscriptions