Ensure GDM disabling automatic mounting of removable media is not overriddenID: oval:org.secpod.oval:def:95941 | Date: (C)2023-12-19 (M)2023-12-20 |
Class: COMPLIANCE | Family: unix |
By default GNOME automatically mounts removable media when inserted as a convenience to the user. By using the lockdown mode in dconf, you can prevent users from changing specific settings. To lock down a dconf key or subpath, create a locks subdirectory in the keyfile directory. The files inside this directory contain a list of keys or subpaths to lock. Just as with the keyfiles, you may add any number of files to this directory. Rationale: With automounting enabled anyone with physical access could attach a USB drive or disc and have its contents available in system even if they lacked permissions to mount it themselves.