Restrict peripherals to input/output devices

The name of the pictureThe name of the pictureThe name of the pictureClash Royale CLAN TAG#URR8PPP











up vote
1
down vote

favorite












I have some Linux Debian machines that I want to prevent "unauthorized" devices from being plugged in. Basically I don't want employees plugging in external hard drives or USB thumb drives and moving data onto or off of the machines.



I would like to disable all the USB ports on the machine, but then I would have no way to plug in a keyboard and mouse. In the old days the mouse and keyboard plugged into PS/2 slots which were separate from the USB, but now all ordinary mice and keyboards are USB.



Is there any way I can allow just a mouse and keyboard and prevent all other access to the machine?







share|improve this question






















  • Related questions: unix.stackexchange.com/q/110418/22142 , unix.stackexchange.com/q/222153/22142 , unix.stackexchange.com/q/111696/22142
    – don_crissti
    Nov 19 '17 at 12:57














up vote
1
down vote

favorite












I have some Linux Debian machines that I want to prevent "unauthorized" devices from being plugged in. Basically I don't want employees plugging in external hard drives or USB thumb drives and moving data onto or off of the machines.



I would like to disable all the USB ports on the machine, but then I would have no way to plug in a keyboard and mouse. In the old days the mouse and keyboard plugged into PS/2 slots which were separate from the USB, but now all ordinary mice and keyboards are USB.



Is there any way I can allow just a mouse and keyboard and prevent all other access to the machine?







share|improve this question






















  • Related questions: unix.stackexchange.com/q/110418/22142 , unix.stackexchange.com/q/222153/22142 , unix.stackexchange.com/q/111696/22142
    – don_crissti
    Nov 19 '17 at 12:57












up vote
1
down vote

favorite









up vote
1
down vote

favorite











I have some Linux Debian machines that I want to prevent "unauthorized" devices from being plugged in. Basically I don't want employees plugging in external hard drives or USB thumb drives and moving data onto or off of the machines.



I would like to disable all the USB ports on the machine, but then I would have no way to plug in a keyboard and mouse. In the old days the mouse and keyboard plugged into PS/2 slots which were separate from the USB, but now all ordinary mice and keyboards are USB.



Is there any way I can allow just a mouse and keyboard and prevent all other access to the machine?







share|improve this question














I have some Linux Debian machines that I want to prevent "unauthorized" devices from being plugged in. Basically I don't want employees plugging in external hard drives or USB thumb drives and moving data onto or off of the machines.



I would like to disable all the USB ports on the machine, but then I would have no way to plug in a keyboard and mouse. In the old days the mouse and keyboard plugged into PS/2 slots which were separate from the USB, but now all ordinary mice and keyboards are USB.



Is there any way I can allow just a mouse and keyboard and prevent all other access to the machine?









share|improve this question













share|improve this question




share|improve this question








edited Nov 19 '17 at 13:01

























asked Nov 19 '17 at 12:48









Tyler Durden

1,38831545




1,38831545











  • Related questions: unix.stackexchange.com/q/110418/22142 , unix.stackexchange.com/q/222153/22142 , unix.stackexchange.com/q/111696/22142
    – don_crissti
    Nov 19 '17 at 12:57
















  • Related questions: unix.stackexchange.com/q/110418/22142 , unix.stackexchange.com/q/222153/22142 , unix.stackexchange.com/q/111696/22142
    – don_crissti
    Nov 19 '17 at 12:57















Related questions: unix.stackexchange.com/q/110418/22142 , unix.stackexchange.com/q/222153/22142 , unix.stackexchange.com/q/111696/22142
– don_crissti
Nov 19 '17 at 12:57




Related questions: unix.stackexchange.com/q/110418/22142 , unix.stackexchange.com/q/222153/22142 , unix.stackexchange.com/q/111696/22142
– don_crissti
Nov 19 '17 at 12:57















active

oldest

votes











Your Answer







StackExchange.ready(function()
var channelOptions =
tags: "".split(" "),
id: "106"
;
initTagRenderer("".split(" "), "".split(" "), channelOptions);

StackExchange.using("externalEditor", function()
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled)
StackExchange.using("snippets", function()
createEditor();
);

else
createEditor();

);

function createEditor()
StackExchange.prepareEditor(
heartbeatType: 'answer',
convertImagesToLinks: false,
noModals: false,
showLowRepImageUploadWarning: true,
reputationToPostImages: null,
bindNavPrevention: true,
postfix: "",
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
);



);













 

draft saved


draft discarded


















StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f405593%2frestrict-peripherals-to-input-output-devices%23new-answer', 'question_page');

);

Post as a guest



































active

oldest

votes













active

oldest

votes









active

oldest

votes






active

oldest

votes















 

draft saved


draft discarded















































 


draft saved


draft discarded














StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f405593%2frestrict-peripherals-to-input-output-devices%23new-answer', 'question_page');

);

Post as a guest













































































Popular posts from this blog

How to check contact read email or not when send email to Individual?

Bahrain

Postfix configuration issue with fips on centos 7; mailgun relay