Locking USB key sticks or drives from a desktop user

Kip Warner kip at thevertigo.com
Sun Mar 16 19:41:36 UTC 2008


On Sun, 2008-03-16 at 13:24 -0400, Az wrote:
> Hi, I am exploring options that will prevent my desktop users from inserting
> a USB key and either copying files to the drive, or removing files from the
> drive. And while searching them for USBs sticks might be fun , I am hoping
> there are other options.
> 
> Is there a way to lock down the USB ports for a person who logs on as a
> desktop user, yet still allow full access for the administrator?
> 
> Here is what I tried:
> 
> 1) I created a brand new user on the server to test things out. I removed
> every check from the "user Privileges" tab. I used the gui to create the new
> user.
> 
> 2) Log in with the user and plugged in a 250G Simple USB external hard and
> had full access to it. I could see all files, read from it, create files,
> etc.
> 
> 
> Any thoughts on if there is a way to shutdown a USB drive?
> 
> 
> Thanks,

Just check the BIOS for disabling USB. My machine has settings to
 disable 1394, USB, card reader, and more in the BIOS.

-- 
Kip Warner -- Software Engineer
OpenPGP encrypted/signed mail preferred
http://www.thevertigo.com
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
URL: <https://lists.ubuntu.com/archives/ubuntu-ca/attachments/20080316/2b488ab2/attachment.pgp>


More information about the ubuntu-ca mailing list