openSUSE Forums > Archives > SF Archives > ARCHIVES - Hardware » How Do I Turn Off Usb Ports For Non-root Users?

Go Back   openSUSE Forums > Archives > SF Archives > ARCHIVES - Hardware
Forums FAQ Members List Search Today's Posts Mark Forums Read


ARCHIVES - Hardware Questions about hardware installation or configuration in SUSE Linux

 
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 05-Jan-2007, 14:39
JimMarch
Guest
 
Posts: n/a
Default

I am setting up several shared-use computers in a non-profit org, for use by volunteers. OS will be 10.2 with KDE.

The users won't have root access. I want to be able to shut off these people's access to the floppy drive, CD drive and USB ports to prevent theft of org data. But they need to be able to go live when you log in as root.

Any ideas where to start?
  #2 (permalink)  
Old 05-Jan-2007, 15:57
harryc
Guest
 
Posts: n/a
Default

Take a look at KDE kiosk. It might do what you want to accomplish...

http://www.enterprisenetworkingplanet.com/...cle.php/3573736
  #3 (permalink)  
Old 05-Jan-2007, 16:01
mmb
Guest
 
Posts: n/a
Default

You could edit the /etc/fstab file. This is where the parameters for mounting floppy & cdrom drives are specified. You want to specify "nouser" instead of "user" so that only root can mount these drives.

See http://www.tuxfiles.org/linuxhelp/fstab.html for more info on understanding the fstab file.


I don't know about usb, though.
  #4 (permalink)  
Old 06-Jan-2007, 00:58
JimMarch
Guest
 
Posts: n/a
Default

I *really* hope the forum software doesn't truncate the title this time...

As far as I can tell from it's manual, KDE Kiosk can't do this.
  #5 (permalink)  
Old 06-Jan-2007, 01:31
mmb
Guest
 
Posts: n/a
Default

Hey Jim.

Further to my response from your other posting (how to turn off hardware) .... I looked at my /etc/fstab file, and see a line that looks like this:

usbfs /proc/bus/usb usbfs noauto 0 0

I'm going to guess that adding "nouser" to column 4 should do the trick. So:

usbfs /proc/bus/usb usbfs noauto,nouser 0 0

(of course, your line might look different.... although if you don't have one, then maybe adding one will help)

Does that work?
  #6 (permalink)  
Old 06-Jan-2007, 01:35
ken_yap
Guest
 
Posts: n/a
Default

Try editing /etc/esmgr.conf and commenting out the line:

class desktop includes usb

Curious to see if this works.
  #7 (permalink)  
Old 06-Jan-2007, 01:44
ken_yap
Guest
 
Posts: n/a
Default

Oh and restart resmgr

rcresmgr restart
  #8 (permalink)  
Old 06-Jan-2007, 02:58
harryc
Guest
 
Posts: n/a
Default

Quote:
I *really* hope the forum software doesn't truncate the title this time...
[/b]
Please do not start new threads on the same topic (cross-posting). It is not allowed on the forums. If you have problems with a title contact a moderator. I have merged your older thread with this one.
harryc
 

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On




 

Search Engine Friendly URLs by vBSEO 3.3.0 RC2