Trust in and maintenance of filesystems [LWN.net]

Trust in and maintenance of filesystems

Posted Nov 22, 2023 11:30 UTC (Wed) by MarcB (subscriber, #101804)
In reply to: Trust in and maintenance of filesystems by ebassi
Parent article: Trust in and maintenance of filesystems

> Ask yourself this: what difference does it make if the device with the file system gets mounted automatically, or the user mounts it themselves as soon as it's available?

This turns the attack from "simply plug this key into an unattended laptop" into "trick the laptop's owner into mounting it". This likely is much harder.

to post comments

Trust in and maintenance of filesystems

Posted Nov 22, 2023 13:47 UTC (Wed) by pizza (subscriber, #46) [Link]

> This turns the attack from "simply plug this key into an unattended laptop" into "trick the laptop's owner into mounting it". This likely is much harder.

Then it's a good thing that the former doesn't automatically mount, eh?

(I just verified this behaviour by plugging a storage device into my locked F39 laptop running GNOME 45 -- the kernel dmesg shows the device was detected, but nothing was mounted until I unlocked the screen then clicked on it)