That's right, but you should only use a meta tag when you can't use robots.txt.

Also, it's worth noting that the robots.txt convention is a mere guideline to robots & spiders. There's no guarantee all robots who find your site will respect the rules within the file.