Take the 2-minute tour ×
Ask Ubuntu is a question and answer site for Ubuntu users and developers. It's 100% free, no registration required.

As a part of security policy we need to disable CD-ROM and USB access for normal users. Only root users should have the access.

I could do it by removing the user from the 'cdrom' and 'plugdev' groups in /etc/group.

But this needs lot of work if there is many users


share|improve this question

3 Answers 3

you can configure a policy agent. Check the following links for USB policy agent:

  1. http://www.linux-usb.org/usb-admin.html

  2. http://www.linux-usb.org/policy.html

NOTE: this is not a GUI solution

share|improve this answer

I found this DLP for linux (with source and video). I hope it helps also:


and that's a demonstration


share|improve this answer

Another workaround for disabling USB:

sudo mv /lib/modules/$(uname -r)/kernel/drivers/usb/storage/usb-storage.ko /root

and for disabling CDROM:

sudo mv /lib/modules/$(uname -r)/kernel/drivers/cdrom/cdrom.ko /root

share|improve this answer
Wouldn't this also prevent admin users from using USB and CDROM? –  rosch Oct 18 '12 at 12:50

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.