Bug 185408 - ark recent list auto mounts unmounted file system w/o asking for password
Summary: ark recent list auto mounts unmounted file system w/o asking for password
Status: RESOLVED FIXED
Alias: None
Product: ark
Classification: Applications
Component: general (show other bugs)
Version: unspecified
Platform: Ubuntu Linux
: NOR normal
Target Milestone: ---
Assignee: Raphael Kubo da Costa
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2009-02-24 06:56 UTC by ebola_influenza
Modified: 2011-01-05 16:42 UTC (History)
1 user (show)

See Also:
Latest Commit:
Version Fixed In:
Sentry Crash Report:

Attachments
Add an attachment

Note You need to log in before you can comment on or make changes to this bug.
Description ebola_influenza 2009-02-24 06:56:57 UTC 
Version:            (using KDE 3.5.10)
OS:                Linux
Installed from:    Ubuntu Packages

if a file in ark's recent list belongs to a currently unmounted file system, selecting that file in the list gets ark to automatically mount the file system (and open the file in ark) without asking for the required sudo password.

doh!
Comment 1 Samuel Brack 2011-01-05 16:30:03 UTC 
Moving the bug to ark. Is this btw still valid and can anyone confirm this? It's quite old and if this behaviour was true (mount without root privileges) that could be a severe security hole.
Comment 2 Samuel Brack 2011-01-05 16:42:40 UTC 
Okay, I tried to reproduce it now and ark doesn't mount anything. It just seems to have cached the files and opens the files from this cache. 
I tested this opening a zip file from my external HDD, switching off the power of this HDD and opening the file with the "recent files" dialog again. Ark could open the compressed files very well. 
My 2nd test was again opening a file from the HDD (in a mounted state), unmounting it (staying switched on) and opening the file with ark through the dialog again. A check with the "mount" command on my commandline showed, that the external HDD was not mounted. 
Closing this bug now.