Linux autorun vulnerabilities?

Posted Feb 10, 2011 2:05 UTC (Thu) by walters (subscriber, #7396)
Parent article: Linux autorun vulnerabilities?

Well, it would probably make sense to delay processing of mount events while the machine is locked, at least in the single-head case.

And the thumbnailers should definitely be sandboxed; it'd probably be fairly trivial to use seccomp() or the SELinux sandbox for it.

Posted Feb 10, 2011 9:47 UTC (Thu) by tzafrir (subscriber, #11501) [Link]

Right. It's practically the same code that is accessible to a remote attacker through a web browser.