Shall we support the autorun feature?
Martin Pitt
martin.pitt at canonical.com
Tue Jan 4 09:21:40 CST 2005
Hi!
nocturn [2005-01-04 6:15 -0500]:
> I also favor disabling this. Some users may like this, but I see it
> as a major security hole that a script gets executed without explicitly
> calling it.
>
> If this is enabled by default, it will be easy to create malware that
> executes something like rm -rf $HOME....
To clarify this, this feature has never been enabled by default. You
have to explicitly enable it in the gnome-volume-manager configuration
dialog (System -> Settings -> Removeable media).
The problem right now is that nothing really changes if you enable it;
so _if_ we choose to not allowing to enable this feature, we should
remove the option from the configuration dialog.
Martin
--
Martin Pitt http://www.piware.de
Ubuntu Developer http://www.ubuntulinux.org
Debian GNU/Linux Developer http://www.debian.org
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
Url : http://lists.ubuntu.com/archives/ubuntu-devel/attachments/20050104/c8301218/attachment.pgp
More information about the ubuntu-devel
mailing list