Detections
Analytics

1.235 OL09-00-002101

Information

OL 9 must disable the graphical user interface autorun function unless required.

GROUP ID: V-271671
RULE ID: SV-271671r1091725

Allowing autorun commands to execute may introduce malicious code to a system. Configuring this setting prevents autorun commands from executing.

Solution

Configure the GNOME desktop to disable the autorun function on removable media.

The dconf settings can be edited in the /etc/dconf/db/* location.

Update the [org/gnome/desktop/media-handling] section of the "/etc/dconf/db/local.d/00-security-settings" database file and add or update the following lines:

[org/gnome/desktop/media-handling]
autorun-never=true

Update the dconf system databases:

$ sudo dconf update

See Also

https://workbench.cisecurity.org/benchmarks/27024

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-7(2), CCI|CCI-001764, Rule-ID|SV-271671r1091725_rule, STIG-ID|OL09-00-002101, Vuln-ID|V-271671

Plugin: Unix

Control ID: 6e29d0db875ee216fb8442dd0ba70900f7a75860362f5959995027e73fc2c068