Description: By default GNOME automatically mounts removable media when inserted as a convenience to the user. By using the lockdown mode in dconf, you can prevent users from changing specific settings. To lock down a dconf key or subpath, create a locks subdirectory in the keyfile directory. The files inside this directory contain a list of keys or subpaths to lock. Just as with the keyfiles, you may add any number of files to this directory. Rationale: With automounting enabled anyone with physical access could attach a USB drive or disc and have its contents available in system even if they lacked permissions to mount it themselves. Fix: Edit or create the file /etc/dconf/db/local.d/locks/00-media-automount and edit or add the following: /org/gnome/desktop/media-handling/automount-open /org/gnome/desktop/media-handling/automount And run the following command to update dconf database: # dconf update

[yes/no]

Edit or create the file /etc/dconf/db/local.d/locks/00-media-automount and edit or add the following: /org/gnome/desktop/media-handling/automount-open /org/gnome/desktop/media-handling/automount And run the following command to update dconf database: # dconf update