Force mount of all USB external/flash drives to be read-only.

[tinsami1]

Hi!

As a matter of information security I'd like to prevent non-admin users to be able to mount external USB drives (flash drives or otherwise) to be read-only. Where in KDE do I set this up? If I make a user a member of the plugdev group, then the user can mount a device in read-write.

Cheers!

[tinsami1]

Re: Force mount of all USB external/flash drives to be read-only.

Anyone?

Here's what I researched and/or tried so far:

1. KDE4 ignores HAL restrictions/policies at least as far as mounting goes. HAL is soon to be replaced by udisk (DeviceKit) so i don't think they'll be addressing anyway.

2. PolicyKit doesn't seem to have this fine grain control. You can only tell it who can mount and/or unmount.

--- mike t.