Ask Ubuntu is a question and answer site for Ubuntu users and developers. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

As a part of security policy we need to disable CD-ROM and USB access for normal users. Only root users should have the access.

I could do it by removing the user from the 'cdrom' and 'plugdev' groups in /etc/group.

But this needs lot of work if there is many users


share|improve this question

you can configure a policy agent. Check the following links for USB policy agent:



NOTE: this is not a GUI solution

share|improve this answer

I found this DLP for linux (with source and video). I hope it helps also:

and that's a demonstration

share|improve this answer

Another workaround for disabling USB:

sudo mv /lib/modules/$(uname -r)/kernel/drivers/usb/storage/usb-storage.ko /root

and for disabling CDROM:

sudo mv /lib/modules/$(uname -r)/kernel/drivers/cdrom/cdrom.ko /root

share|improve this answer
Wouldn't this also prevent admin users from using USB and CDROM? – rosch Oct 18 '12 at 12:50

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.