Thread-topic: Preventing access to certain USB devices
A possible approach would be to write your own KEXT that matches the
USBMSC devices you don't want to make available, and then don't publish
a service nub.
Cary
-----Original Message-----
From: email@hidden [mailto:email@hidden] On
Behalf Of Dieter Spaar
Sent: Tuesday, October 28, 2003 2:41 PM
To: email@hidden
Subject: Preventing access to certain USB devices
Hello,
I need to prevent that users have access to certain USB devices (e.g.
USB Mass Storage devices). This is mainly because of restrictions due to
a security policy in a closed environment.
A first idea would be to simply disable or remove the USB Mass Storage
driver. Maybe its possible to adjust the rights of the driver so that
only user with adminstrative rights can access it ? This would not allow
normal users to access any external USB drives.
A more advanced solution would allow to define the USB devices which can
be used in a white list (e.g. HID devices and USB cameras). I guess this
would require some sort of daemon which looks for USB devices as they
arrive and disable them if they are not listed in the white list ?
I am not sure if I am on the right track so any comments are welcome.
Thank you very much.
Best regards,
Dieter Spaar
--
Dieter Spaar, Germany email@hidden
_______________________________________________
usb mailing list | email@hidden
Help/Unsubscribe/Archives:
http://www.lists.apple.com/mailman/listinfo/usb
Do not post admin requests to the list. They will be ignored.
_______________________________________________
usb mailing list | email@hidden
Help/Unsubscribe/Archives: http://www.lists.apple.com/mailman/listinfo/usb
Do not post admin requests to the list. They will be ignored.
