[Pkg-utopia-maintainers] Bug#718815: policykit-1-gnome: User that does not belong to plugdev/floppy/etc. group can mount usb stick in Gnome

[ST]

Package: policykit-1-gnome
Version: 0.105-2
Severity: normal
Tags: d-i upstream

Dear Maintainer,
*** Please consider answering these questions, where appropriate ***

   * What led up to the situation?

Created a testuser - adduser testuser which belongs only to the group testuser,
no plugdev/floppy/cdrom/disk/etc . But once logged in as testuser in Gnome - it
is possible to mount usb stick, which should not be the case

   * What exactly did you do (or not do) that was effective (or
     ineffective)?

adduser testuser
login to Gnome as testuser

   * What was the outcome of this action?

testuser is capable of mounting usb stick

   * What outcome did you expect instead?

he should not be capable of mounting usb stick




-- System Information:
Debian Release: 7.1
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 3.2.0-4-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_GB.utf8, LC_CTYPE=en_GB.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages policykit-1-gnome depends on:
ii  libc6                  2.13-38
ii  libgdk-pixbuf2.0-0     2.26.1-1
ii  libglib2.0-0           2.33.12+really2.32.4-5
ii  libgtk-3-0             3.4.2-6
ii  libpolkit-agent-1-0    0.105-3
ii  libpolkit-gobject-1-0  0.105-3
ii  policykit-1            0.105-3

policykit-1-gnome recommends no packages.

policykit-1-gnome suggests no packages.

-- no debconf information