Hi, the easiest is to remove the users you don't want to have access from the relevant groups (usually usb,plugdev,cdrom,cdrw...). Another option is manually removing devices from /dev : rm /dev/sr0 (to remove cdrom using the new pata drivers). last and most easy in my opinion is blacklisting relevant modules, preventing drivers from being loaded : edit /etc/modprobe.d/blacklist and add the modules you want blocked there. (for USB it's usbcore, for cdroms using PATA stack sr_mod).
Hope I helped
|