Shall we support the autorun feature?

Sivan Green sivan at piware.de
Wed Jan 19 19:01:52 CST 2005


On 16:21, Tue 04 Jan 05, Martin Pitt wrote:
> Hi!
> 
> nocturn [2005-01-04  6:15 -0500]:
> > I also favor disabling this.   Some users may like this, but I see it
> > as a major security hole that a script gets executed without explicitly
> > calling it.
> > 
> > If this is enabled by default, it will be easy to create malware that
> > executes something like rm -rf $HOME....
> 
> To clarify this, this feature has never been enabled by default. You
> have to explicitly enable it in the gnome-volume-manager configuration
> dialog (System -> Settings -> Removeable media).
> 
> The problem right now is that nothing really changes if you enable it;
> so _if_ we choose to not allowing to enable this feature, we should
> remove the option from the configuration dialog.

True, Seconded.

Sivan



More information about the ubuntu-devel mailing list