Re: Autorun is VERY bad

[Slicky Johnson <slickyjohnson@gmail.com>]

On Mon, 07 Feb 2011 10:21:48 -0800
kellyremo <kellyremo@zoho.com> wrote:

> How to disable autorun? Are there any hidden autorun features on a
> standard Debian install??
> 
> http://securitytube.net/USB-Autorun-attacks-against-Linux-at-Shmoocon-2011-video.aspx
> 
> 

Asking the ##gnome crew it appears the default is to auto_run. It can
be disable as noted in this thread. The file and line that is changed
after the GUI tweak is

/.gconf/apps/nautilus/preferences/%gconf.xml:<entry
name="media_autorun_never" mtime="1297104269" type="bool" value="true"/>

However I'm told Via Juhaz in ##gnome the best way to generate that is
with.. 

gconftool-2 -t bool -s /apps/nautilus/preferences/media_autorun_never

and "for default, add something like --direct
--config-source=xml:readwrite:/etc/gconf/gconf.xml.defaults
you can set it mandatory too if the users shouldn't be able to change
it back. the exact path you should use may depend on
distro, /etc/gconf/2/path probably has a commented list of the config
sources"

I'll have to look into it more tomorrow.