[Freeipa-users] Can we block usb access to users

[Dmitri Pal]

On 06/16/2013 08:02 AM, Natxo Asenjo wrote:
>
>
> Op 16 jun. 2013 08:31 schreef "Christian Horn" <chorn at fluxcoil.net
> <mailto:chorn at fluxcoil.net>> het volgende:
> >
> > Hi,
> >
> > On Sun, Jun 16, 2013 at 11:49:18AM +0530, RK RK wrote:
> > >
> > > One thing I want to know is can we block the access to USB storage
> devices
> > > like(pendrive, usb-CDROM etc.,) for normal users who are logging into
> > > client machines in the IPA domain.
> >
> > This is more about systems administration than IPA.
> > You might want to prevent the usb storage kernel module from beeing
> > loaded.
> >
> > Christian
>
> If you do that it will not be available for anybody :-)
>
> I guess you could get something like what the op wants using policy
> kit probably.
>

Correct, I checked with the polkit team once several months ago. They
said yes, just create a polkit rule. But we have not gone beyond that.

> > _______________________________________________
> > Freeipa-users mailing list
> > Freeipa-users at redhat.com <mailto:Freeipa-users at redhat.com>
> > https://www.redhat.com/mailman/listinfo/freeipa-users
>
>
>
> _______________________________________________
> Freeipa-users mailing list
> Freeipa-users at redhat.com
> https://www.redhat.com/mailman/listinfo/freeipa-users


-- 
Thank you,
Dmitri Pal

Sr. Engineering Manager for IdM portfolio
Red Hat Inc.


-------------------------------
Looking to carve out IT costs?
www.redhat.com/carveoutcosts/



-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20130617/335bf836/attachment.htm>