@jspaces Maybe! However there is no trace of this kind of rule in the two files I found in Ubuntu...
Moreover this rule is too wide, I want to narrow it down, but I failed.
For example I tried:
ACTION=="add", SUBSYSTEM=="thunderbolt", ATTR{vendor}=="0x10de", ATTR{authorized}=="0", ATTR{authorized}="1"
ACTION=="add", SUBSYSTEM=="thunderbolt", ATTR{vendor}=="0x8086", ATTR{authorized}=="0", ATTR{authorized}="1"
with 8086 being Intel and 10de being NVidia, but when I do this it does not work...
I think it is a bad idea, security-wise, to keep a rule this lenient...