New users should not get added to the 'disk' and 'storage' groups

[Bleuzen]

When I create a new standard user, the new user belongs to the groups: disk and storage (and others)

This is bad, because users of the disk group can edit partitions and users of the storage group can for example edit /etc/fstab using gnome-disks.

Isn't this a big security hole? Every new user can do this, without an ask for a password, so ..
I would recommend not adding all new users to this 2 groups.

[twifty]

I have a very similar issue, possibly related. On a fresh install, with Gnome, the user created via the installer is able to edit fstab via the Gnome disks utility without being prompted for a password. Unlike the above, my user groups are unknown user username, there is no disk or storage.

[Bleuzen]

Hey @philmmanjaro or anyone ..
Please take a look at it.