Locking USB key sticks or drives from a desktop user

[Kirk Bridger]

I thought a lot of fine-grained permission stuff was coming with things 
like PolicyKit and SELinux integration.  But maybe this is an easy one - 
can you just remove those users from the plugdev group,?

http://wiki.debian.org/DebianDesktopHowTo


Kirk



Az wrote:
> Hi, I am exploring options that will prevent my desktop users from inserting
> a USB key and either copying files to the drive, or removing files from the
> drive. And while searching them for USBs sticks might be fun , I am hoping
> there are other options.
>
> Is there a way to lock down the USB ports for a person who logs on as a
> desktop user, yet still allow full access for the administrator?
>
> Here is what I tried:
>
> 1) I created a brand new user on the server to test things out. I removed
> every check from the "user Privileges" tab. I used the gui to create the new
> user.
>
> 2) Log in with the user and plugged in a 250G Simple USB external hard and
> had full access to it. I could see all files, read from it, create files,
> etc.
>
>
> Any thoughts on if there is a way to shutdown a USB drive?
>
>
> Thanks,
>
>
>