Blame SOURCES/add-mount-removable-storage-devices-as-read-only-option.patch

9dd950
From 1dec88b007a13860ae8da33687fe4d496053ec98 Mon Sep 17 00:00:00 2001
9dd950
From: Ondrej Holy <oholy@redhat.com>
9dd950
Date: Tue, 14 May 2019 08:12:59 +0200
9dd950
Subject: [PATCH] schemas: Add "mount-removable-storage-devices-as-read-only"
9dd950
 option
9dd950
9dd950
Add lockdown option to prevent users from writing or modifying files
9dd950
on removable storage devices. If enabled, gvfs is going to mount removable
9dd950
storage devices (i.e. flashdisks, mobile phones, cameras) as read-only.
9dd950
---
9dd950
 schemas/org.gnome.desktop.lockdown.gschema.xml.in | 8 ++++++++
9dd950
 1 file changed, 8 insertions(+)
9dd950
9dd950
diff --git a/schemas/org.gnome.desktop.lockdown.gschema.xml.in b/schemas/org.gnome.desktop.lockdown.gschema.xml.in
9dd950
index 0150b32..d31fb77 100644
9dd950
--- a/schemas/org.gnome.desktop.lockdown.gschema.xml.in
9dd950
+++ b/schemas/org.gnome.desktop.lockdown.gschema.xml.in
9dd950
@@ -71,5 +71,13 @@
9dd950
         and removing users, as well as changing other users settings.
9dd950
       </description>
9dd950
     </key>
9dd950
+    <key name="mount-removable-storage-devices-as-read-only" type="b">
9dd950
+      <default>false</default>
9dd950
+      <summary>Mount removable storage devices as read-only</summary>
9dd950
+      <description>
9dd950
+        Prevent users from writing or modifying files on removable storage
9dd950
+        devices (i.e. flash disks, mobile phones, cameras).
9dd950
+      </description>
9dd950
+    </key>
9dd950
   </schema>
9dd950
 </schemalist>
9dd950
-- 
9dd950
2.21.0
9dd950