Bug 185408

Summary:	ark recent list auto mounts unmounted file system w/o asking for password
Product:	[Applications] ark	Reporter:	ebola_influenza <rtb>
Component:	general	Assignee:	Raphael Kubo da Costa <rakuco>
Status:	RESOLVED FIXED
Severity:	normal	CC:	samuel.brack
Priority:	NOR
Version:	unspecified
Target Milestone:	---
Platform:	Ubuntu
OS:	Linux
Latest Commit:		Version Fixed In:
Sentry Crash Report:

Description ebola_influenza 2009-02-24 06:56:57 UTC

Version:            (using KDE 3.5.10)
OS:                Linux
Installed from:    Ubuntu Packages

if a file in ark's recent list belongs to a currently unmounted file system, selecting that file in the list gets ark to automatically mount the file system (and open the file in ark) without asking for the required sudo password.

doh!

Comment 1 Samuel Brack 2011-01-05 16:30:03 UTC

Moving the bug to ark. Is this btw still valid and can anyone confirm this? It's quite old and if this behaviour was true (mount without root privileges) that could be a severe security hole.

Comment 2 Samuel Brack 2011-01-05 16:42:40 UTC

Okay, I tried to reproduce it now and ark doesn't mount anything. It just seems to have cached the files and opens the files from this cache. 
I tested this opening a zip file from my external HDD, switching off the power of this HDD and opening the file with the "recent files" dialog again. Ark could open the compressed files very well. 
My 2nd test was again opening a file from the HDD (in a mounted state), unmounting it (staying switched on) and opening the file with ark through the dialog again. A check with the "mount" command on my commandline showed, that the external HDD was not mounted. 
Closing this bug now.