Detections
Analytics

1.7.3 Ensure desktop autorun-never is enabled

Information

The autorun-never setting allows the Cinnamon Desktop to disable autorun.

Malware on removable media may taking advantage of Autorun features when the media is inserted into a system and execute.

Solution

Run the following command to set autorun-never to true :

# gsettings set org.cinnamon.desktop.media-handling autorun-never true

Note: A reboot may be required for the setting to take effect

See Also

https://workbench.cisecurity.org/benchmarks/20741

Item Details

Category: CONFIGURATION MANAGEMENT, IDENTIFICATION AND AUTHENTICATION, MEDIA PROTECTION

References: 800-53|CM-1, 800-53|CM-2, 800-53|CM-6, 800-53|CM-7, 800-53|IA-5, 800-53|MP-7, CSCv7|8.5

Plugin: Unix

Control ID: ab6d71b6cfa4fda5660a8ddae4e3f4bd62b245480d513508f9ca49255723390c