<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
On 06/16/2013 08:02 AM, Natxo Asenjo wrote:
<blockquote
cite="mid:CAHBEJzXDwBZ9cX8PQ0xGHMVkkiX7y9NsR787m=EW3ahhyObGnQ@mail.gmail.com"
type="cite">
<p dir="ltr"><br>
Op 16 jun. 2013 08:31 schreef "Christian Horn" <<a
moz-do-not-send="true" href="mailto:chorn@fluxcoil.net">chorn@fluxcoil.net</a>>
het volgende:<br>
><br>
> Hi,<br>
><br>
> On Sun, Jun 16, 2013 at 11:49:18AM +0530, RK RK wrote:<br>
> ><br>
> > One thing I want to know is can we block the access to
USB storage devices<br>
> > like(pendrive, usb-CDROM etc.,) for normal users who
are logging into<br>
> > client machines in the IPA domain.<br>
><br>
> This is more about systems administration than IPA.<br>
> You might want to prevent the usb storage kernel module
from beeing<br>
> loaded.<br>
><br>
> Christian</p>
<p dir="ltr">If you do that it will not be available for anybody
:-)</p>
<p dir="ltr">I guess you could get something like what the op
wants using policy kit probably.</p>
</blockquote>
<br>
Correct, I checked with the polkit team once several months ago.
They said yes, just create a polkit rule. But we have not gone
beyond that.<br>
<br>
<blockquote
cite="mid:CAHBEJzXDwBZ9cX8PQ0xGHMVkkiX7y9NsR787m=EW3ahhyObGnQ@mail.gmail.com"
type="cite">
<p dir="ltr">> _______________________________________________<br>
> Freeipa-users mailing list<br>
> <a moz-do-not-send="true"
href="mailto:Freeipa-users@redhat.com">Freeipa-users@redhat.com</a><br>
> <a moz-do-not-send="true"
href="https://www.redhat.com/mailman/listinfo/freeipa-users">https://www.redhat.com/mailman/listinfo/freeipa-users</a><br>
</p>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
Freeipa-users mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Freeipa-users@redhat.com">Freeipa-users@redhat.com</a>
<a class="moz-txt-link-freetext" href="https://www.redhat.com/mailman/listinfo/freeipa-users">https://www.redhat.com/mailman/listinfo/freeipa-users</a></pre>
</blockquote>
<br>
<br>
<pre class="moz-signature" cols="72">--
Thank you,
Dmitri Pal
Sr. Engineering Manager for IdM portfolio
Red Hat Inc.
-------------------------------
Looking to carve out IT costs?
<a class="moz-txt-link-abbreviated" href="http://www.redhat.com/carveoutcosts/">www.redhat.com/carveoutcosts/</a>
</pre>
</body>
</html>