! Please note that this is a snapshot of our old Bugzilla server, which is read only since May 29, 2020. Please go to gitlab.xfce.org for our new server !
don't mount/execute stuff automatically by default
Status:
RESOLVED: FIXED
Product:
Thunar-volman
Component:
General

Comments

Description Yves-Alexis Perez editbugs 2011-02-09 20:23:39 CET
Hey,

I'm wondering about the default thunar-volman config.

Right now, the default config is to mount/browse/auto-run/auto-open stuff on removable drives. I'm not sure it's a safe default, considering how “autorun” stuff has been problematic on Windows OS.

There have been exploits on automounted/browsed stuff (via thumbnailing services), see http://www.h-online.com/open/news/item/Linux-vulnerable-to-USB-worms-1185696.html for example.

So I think it'd be wise to disable those by default.

What do you think?
Comment 1 Skunnyk editbugs 2020-05-25 22:36:51 CEST
On a fresh thunar-volman , volume are not automounted by default, I need to clic on then in thunar. So I guess this is fiex now.

Bug #7261

Reported by:
Yves-Alexis Perez
Reported on: 2011-02-09
Last modified on: 2020-05-25

People

Assignee:
Jannis Pohlmann
CC List:
2 users

Version

Attachments

Additional information