From mboxrd@z Thu Jan 1 00:00:00 1970 From: Greg KH Date: Thu, 07 Oct 2010 20:50:53 +0000 Subject: Re: Restricting USB access Message-Id: <20101007205053.GB16961@kroah.com> List-Id: References: In-Reply-To: MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit To: linux-hotplug@vger.kernel.org On Thu, Oct 07, 2010 at 03:50:55PM -0400, Ryan Lawrie wrote: > > Good afternoon, > > Just wondering if I could get your assistance with something. > > I need to secure the USB ports on my LAN workstations so they are not > writable by users (other than a certain group that I specify). Is this type > of restriction possible using udev rules? USB ports are "writeable" or "readable", it depends on the devices you plug into them that you could then read or write to. > I was using PolicyKit before but since we've changed OS (from openSUSE11.0 > to 64-bit openSUSE11.2) that no longer seems to function properly. > Everybody has access to the USB ports now. You might want to just restrict the users for the specific devices using a udev rule, or policykit, if that's still around. What types of devices are you trying to restrict? thanks, greg k-h