Shall we support the autorun feature?

Martin Pitt martin.pitt at canonical.com
Tue Jan 4 09:21:40 CST 2005


Hi!

nocturn [2005-01-04  6:15 -0500]:
> I also favor disabling this.   Some users may like this, but I see it
> as a major security hole that a script gets executed without explicitly
> calling it.
> 
> If this is enabled by default, it will be easy to create malware that
> executes something like rm -rf $HOME....

To clarify this, this feature has never been enabled by default. You
have to explicitly enable it in the gnome-volume-manager configuration
dialog (System -> Settings -> Removeable media).

The problem right now is that nothing really changes if you enable it;
so _if_ we choose to not allowing to enable this feature, we should
remove the option from the configuration dialog.

Martin
-- 
Martin Pitt                       http://www.piware.de
Ubuntu Developer            http://www.ubuntulinux.org
Debian GNU/Linux Developer       http://www.debian.org
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
Url : http://lists.ubuntu.com/archives/ubuntu-devel/attachments/20050104/c8301218/attachment.pgp


More information about the ubuntu-devel mailing list