We are using Red Hat Enterprises Linux 6.

I’m trying to disable cd/dvd write capability in Linux and have had no luck. I’ve added to my /etc/fstab

/dev/cdrom /media/dvdrecorder iso9660 ro,user,noauto,unhide

I’ve taken away all user (other) permissions to file: /usr/bin/brasero, /usr/bin/cdrecord and /usr/bin/dvdrecord

Still users can write to DVD and CDs using the Linux Built in Graphic Utility, Brasero.

Does anyone have a "simple" solution. These users will contine to need access to read CDs and DVDs.

A million thanks in advance,
Johnny Mac

then uninstall the Gnome default burner program

Hi there,

what about simply swapping the DVD writer for a plain readonly drive, a true DVD-ROM drive?

[X] Doc CPU

Have you asked RedHat support this question?

I'm curious why this is desired/required?

If persons are illegally or immorally copying software or content, that's a legal issue and I've found that no matter what technology one puts in place to disallow it, but where you still allow access; technology faces continual challenges.

Therefore the most simple solution is to prohibit users' access on the machines once they've illustrated a propensity for rules violation.

You could try various ways to restrict use of that graphical utility, or un-install it and try to prohibit it being re-installed. Again, those are challenges where you'll be facing a potentially determined base of users. They may find that if they mount a thumbstick with the program, they can run this graphic utility without ever having to place it on the machine.

Another more complex solution is to replace the CD/DVD devices and replace them with readers only.

By the way, if access to CD/DVD media is required, but also only required for certain media volumes and also widely required; then another solution is to remove all the CD/DVD drives and network mount one controlled server, or set of servers with the required media mounted, obviously physically restricted from user access. That way they can view some common media, if that's the case.

EDIT: To undo this later do a "chmod 755" on the same file.