LinuxQuestions.org
Latest LQ Deal: Linux Power User Bundle
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - General
User Name
Password
Linux - General This Linux forum is for general Linux questions and discussion.
If it is Linux Related and doesn't seem to fit in any other forum then this is the place.

Notices


Reply
  Search this Thread
Old 09-11-2006, 07:57 AM   #1
bboy-mass
Member
 
Registered: Aug 2006
Location: England
Posts: 39

Rep: Reputation: 15
Redhat and USB configuration (lock-down)


Hello,

I need to lock-down our RedHat server's USB ports. Is it posible to stop people using USB memory stricks on the desktop or server machines? I can't disable the ports in the BIOS, as we need them for keyboard and mouse. A friend said you may be able to configure the ports for keybaord and mouse only?

Is it posible, or will I have to disable them on the BIOS and force eveyone to use ps/2 keybaord/mice for desktop and server configuraton?
 
Old 09-11-2006, 08:05 AM   #2
zulfilee
Member
 
Registered: Apr 2004
Location: India
Distribution: Redhat,Fedora
Posts: 430

Rep: Reputation: 39
Do users have root permission?
How do they mount the drives and access it?

Disabling the mount permission to user should prevent them from using USB drives.
 
Old 09-11-2006, 08:21 AM   #3
bboy-mass
Member
 
Registered: Aug 2006
Location: England
Posts: 39

Original Poster
Rep: Reputation: 15
Sounds like a good idea to disable mounting for users.

Would I need to edit the /etc/fstab file? If so, what syntax would i need to apply
to the file?

Regards
 
Old 09-11-2006, 10:32 AM   #4
Lotharster
Member
 
Registered: Nov 2005
Posts: 144

Rep: Reputation: 18
Code:
$ man fstab
will give you the details.
 
Old 09-12-2006, 12:42 AM   #5
zulfilee
Member
 
Registered: Apr 2004
Location: India
Distribution: Redhat,Fedora
Posts: 430

Rep: Reputation: 39
Yeah that will be a gud idea.

First checkout as to what the USB drive is detected.
sda,sdb,...

Then for that device put an entry in fstab with the option user=root or something like that.

Still you need to tell as to how the users are accessing the devices.Depending on that you can put your control
 
Old 09-13-2006, 05:41 AM   #6
bboy-mass
Member
 
Registered: Aug 2006
Location: England
Posts: 39

Original Poster
Rep: Reputation: 15
hi,

I guess all desktop machines running RHat will need this change implementing. As for the servers
in our machine room, the same applies.

We just want to stop general desktop users inserting memory stiks and causing any security issues. I dont want to disable the USB devices on the BIOS, as we use USB keybaords,mice,printers etc. We just want to stop portable file systems being used in the work place.

I take it I replace the "default" from the fstab file for the device and set it to "user=root" ??

Thanks in advance,
 
Old 09-13-2006, 06:00 AM   #7
zulfilee
Member
 
Registered: Apr 2004
Location: India
Distribution: Redhat,Fedora
Posts: 430

Rep: Reputation: 39
If possibe post the entry here.


As for the option dont give user=root
Try this

noauto,gid=0,kudzu instead of default


Also see

man 5 fstab
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
USB flash drive lock satimis Linux - Software 4 03-02-2006 05:49 AM
RedHat 9.0 freezes with blinking Caps lock and Scroll lock queen-bee Linux - Software 0 07-30-2004 10:40 PM
USB plug and play configuration on Redhat 9.0 pawlub Linux - General 1 03-10-2004 10:16 AM
redhat 9 random lock up zombiedeth Linux - General 2 11-14-2003 04:41 PM
redhat 8.0 lock up fdiaz05 Linux - Software 4 03-01-2003 07:43 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - General

All times are GMT -5. The time now is 02:54 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration