Take the 2-minute tour ×
Ask Ubuntu is a question and answer site for Ubuntu users and developers. It's 100% free, no registration required.

As a part of security policy we need to disable CD-ROM and USB access for normal users. Only root users should have the access.

I could do it by removing the user from the 'cdrom' and 'plugdev' groups in /etc/group.

But this needs lot of work if there is many users

I NEED A GUI TOOL!

share|improve this question
add comment

3 Answers 3

you can configure a policy agent. Check the following links for USB policy agent:

  1. http://www.linux-usb.org/usb-admin.html

  2. http://www.linux-usb.org/policy.html

NOTE: this is not a GUI solution

share|improve this answer
add comment

I found this DLP for linux (with source and video). I hope it helps also:

https://github.com/edwinbs/linux-edlp

and that's a demonstration

http://www.youtube.com/watch?v=-KKahJcfevk

share|improve this answer
add comment

Another workaround for disabling USB:

sudo mv /lib/modules/$(uname -r)/kernel/drivers/usb/storage/usb-storage.ko /root

and for disabling CDROM:

sudo mv /lib/modules/$(uname -r)/kernel/drivers/cdrom/cdrom.ko /root

share|improve this answer
    
Wouldn't this also prevent admin users from using USB and CDROM? –  rosch Oct 18 '12 at 12:50
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.