{"id":74702,"date":"2023-06-05T13:12:07","date_gmt":"2023-06-05T17:12:07","guid":{"rendered":"https:\/\/jumpcloud.com\/?post_type=support&#038;p=74702"},"modified":"2023-06-05T13:12:07","modified_gmt":"2023-06-05T17:12:07","slug":"create-a-disable-usb-storage-policy-for-linux","status":"publish","type":"support","link":"https:\/\/jumpcloud.com\/support\/create-a-disable-usb-storage-policy-for-linux","title":{"rendered":"Create a Disable USB Storage Policy for Linux"},"content":{"rendered":"\n<p>The file manager on Linux devices supports all removable media that have the following characteristics:<\/p>\n\n\n\n<ul>\n<li>The removable media has an entry in the<strong>&nbsp;\/etc\/fstab<\/strong>&nbsp;file.<\/li>\n\n\n\n<li>The user option is specified in the entry for the removable media in the&nbsp;<strong>\/etc\/fstab<\/strong>&nbsp;file.<\/li>\n\n\n\n<li>A hotplug daemon detects and auto mounts USM mass storage devices such as cameras, sticks, and flash memory readers inside the \/mnt or \/media locations.<\/li>\n<\/ul>\n\n\n\n<p>JumpCloud provides a policy that allows you to block any USB mass storage device with these characteristics.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Creating a Linux Removable Storage Policy<\/h2>\n\n\n\n<p>Normally, when the Linux file manager detects new media, an object for the media is added to the desktop. After you apply this policy to a device and reboot it, the Linux file manager won&#8217;t mount any USB that the user inserts.<\/p>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card note\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/note-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Note:<\/strong> \n<ul>\n<li>To apply a policy to a device, it must be running on a supported OS.\u00a0Before you assign a policy, you can follow the instructions in\u00a0<a href=\"https:\/\/jumpcloud.com\/support\/assign-a-policy-to-a-device\" target=\"_blank\" rel=\"noreferrer noopener\">Assign a Policy to a Device<\/a>.<\/li>\n\n\n\n<li>To apply a policy to a group of device, you must define system groups. Before you assign a policy, you can follow the instructions in\u00a0<a href=\"https:\/\/jumpcloud.com\/support\/create-a-device-group\" target=\"_blank\" rel=\"noreferrer noopener\">Create a Device Group<\/a>.<\/li>\n<\/ul>\n <\/div><\/div><\/div><\/div>\n\n\n\n<p><strong>To create a Linux removable storage policy:<\/strong><\/p>\n\n\n\n<ol>\n<li>Log in to the JumpCloud Admin Portal:\u00a0<a href=\"https:\/\/console.jumpcloud.com\/login\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/console.jumpcloud.com\/login<\/a>.<\/li>\n\n\n\n<li>Go to&nbsp;<strong>DEVICE MANAGEMENT<\/strong>&nbsp;&gt;&nbsp;<strong>Policy Management<\/strong>.<\/li>\n\n\n\n<li>Click (<strong>&nbsp;+&nbsp;<\/strong>).<\/li>\n\n\n\n<li>On the Configure New Policy panel<strong>,<\/strong>\u00a0select\u00a0<strong>Linux<\/strong>.<\/li>\n\n\n\n<li>To the right of&nbsp;<strong>Disable USB Storage<\/strong>&nbsp;click&nbsp;<strong>configure<\/strong>.<\/li>\n\n\n\n<li>In&nbsp;<strong>POLICY NAME<\/strong>&nbsp;you can&nbsp;type in a new title if necessary.<\/li>\n\n\n\n<li>To apply the policy to one or more devices, click&nbsp;<strong>Devices<\/strong>. Next to&nbsp;<strong>System Name<\/strong>, select the options for all the devices where you want to apply this policy.<\/li>\n\n\n\n<li>To apply the policy to a defined group of devices, select the&nbsp;<strong>Device Groups&nbsp;<\/strong>tab. Next to&nbsp;<strong>Device Group Name<\/strong>, select the options for all the groups where you want to apply this policy.<\/li>\n\n\n\n<li>Click&nbsp;<strong>save policy<\/strong>.<\/li>\n\n\n\n<li>Restart all devices where you applied the removable storage policy.<\/li>\n<\/ol>\n\n\n\n<h2 class=\"wp-block-heading\">Viewing Policy Status<\/h2>\n\n\n\n<p>After a policy is created and saved, it may take a few minutes for the policy to be enforced on the device. When the policy is running, you can view its status to determine\u00a0if the policy has been successfully applied or it it requires your attention.<\/p>\n\n\n\n<p><strong>To view policy status:<\/strong><\/p>\n\n\n\n<ol>\n<li>Log in to the JumpCloud Admin Portal:\u00a0<a href=\"https:\/\/console.jumpcloud.com\/login\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/console.jumpcloud.com\/login<\/a>.<\/li>\n\n\n\n<li>Go to&nbsp;<strong>DEVICE MANAGEMENT<\/strong>&nbsp;&gt;&nbsp;<strong>Policy Management<\/strong>.<\/li>\n\n\n\n<li>Click the&nbsp;<strong>Disable&nbsp;USB Storage&nbsp;<\/strong>policy&nbsp;that you just created.<\/li>\n\n\n\n<li>Click&nbsp;<strong>Status<\/strong>.<\/li>\n\n\n\n<li>To see the last Result Log for a device where this policy is applied, in the results list next to a device, click&nbsp;<strong>View<\/strong>.<\/li>\n<\/ol>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card note\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/note-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Note:<\/strong> \n<p>If any errors occur, they are listed in Exit Status. If you have an Exit Status of <strong>0<\/strong>, no errors have occurred when applying or enforcing this policy.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n<h2 class=\"wp-block-heading\">Deleting a Linux Removable Storage Policy<\/h2>\n\n\n\n<p>There are\u00a0several ways you can permit users to access removable storage devices after creating a policy to block access:<\/p>\n\n\n\n<ul>\n<li>If you want to allow users on a specific device to access storage devices, you can remove that device from the policy without removing the policy itself.<\/li>\n\n\n\n<li>You can also remove groups of devices from the&nbsp;policy without removing the policy itself.<\/li>\n\n\n\n<li>To allow all Linux devices managed by JumpCloud to access removable storage devices, you can remove the policy completely.<\/li>\n<\/ul>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card warning\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/warning-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Warning:<\/strong> \n<p>Remember that allowing users access to removable media poses risks, including data theft and the introduction\u00a0of malware.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n<p><strong>To allow users to access Linux removable storage:<\/strong><\/p>\n\n\n\n<ol>\n<li>Log in to the JumpCloud Admin Portal:\u00a0<a href=\"https:\/\/console.jumpcloud.com\/login\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/console.jumpcloud.com\/login<\/a>.<\/li>\n\n\n\n<li>Go to&nbsp;<strong>DEVICE MANAGEMENT<\/strong>&nbsp;&gt;&nbsp;<strong>Policy Management<\/strong>.<\/li>\n\n\n\n<li>If you want to remove devices from the policy, click&nbsp;<strong>Disable<\/strong>&nbsp;<strong>USB Storage<\/strong>&nbsp;or the name that you gave this policy. Go to&nbsp;<strong>Devices<\/strong>. Clear the options for all devices that you want to remove. Click&nbsp;<strong>save policy<\/strong>.<\/li>\n\n\n\n<li>If you want to remove groups from the policy, click&nbsp;<strong>Disable<\/strong>&nbsp;<strong>USB Storage<\/strong>&nbsp;or the name that you gave this policy. Select the&nbsp;<strong>Device Groups&nbsp;<\/strong>tab. Clear the options for all groups that you want to remove. Click&nbsp;<strong>save policy<\/strong>.<\/li>\n\n\n\n<li>If you want to completely remove the policy, select&nbsp;<strong>Disable<\/strong>&nbsp;<strong>USB Storage<\/strong>, or the name you gave to this policy. Click&nbsp;<strong>delete<\/strong>. On the Delete Policy confirmation screen, click&nbsp;<strong>continue<\/strong>.<\/li>\n<\/ol>\n\n\n\n<p><strong>Learn More<\/strong><\/p>\n\n\n\n<p><a href=\"https:\/\/jumpcloud.com\/support\/manage-removable-storage-on-windows-devices\" target=\"_blank\" rel=\"noreferrer noopener\">Manage\u00a0Removable Storage on Windows Devices<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>The file manager on Linux devices supports all removable media that have the following characteristics: JumpCloud provides a policy that [&hellip;]<\/p>\n","protected":false},"author":206,"featured_media":0,"template":"","meta":{"_acf_changed":false,"_oasis_is_in_workflow":0,"_oasis_original":0,"_oasis_task_priority":"","inline_featured_image":false,"footnotes":""},"support_category":[2852,2926,2862],"support_tag":[],"coauthors":[2842],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v22.9 (Yoast SEO v22.9) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Create a Disable USB Storage Policy for Linux - JumpCloud<\/title>\n<meta name=\"description\" content=\"Learn how to configure a policy to disable removable storage on Linux devices.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/jumpcloud.com\/support\/create-a-disable-usb-storage-policy-for-linux\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Create a Disable USB Storage Policy for Linux\" \/>\n<meta property=\"og:description\" content=\"Learn how to configure a policy to disable removable storage on Linux devices.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/jumpcloud.com\/support\/create-a-disable-usb-storage-policy-for-linux\" \/>\n<meta property=\"og:site_name\" content=\"JumpCloud\" \/>\n<meta property=\"og:image\" content=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/07\/202405-MISC-JumpCloudHelpCenter-SiteDisplay-min-2.png\" \/>\n\t<meta property=\"og:image:width\" content=\"890\" \/>\n\t<meta property=\"og:image:height\" content=\"525\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"4 minutes\" \/>\n\t<meta name=\"twitter:label2\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data2\" content=\"pamkellman\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/jumpcloud.com\/support\/create-a-disable-usb-storage-policy-for-linux\",\"url\":\"https:\/\/jumpcloud.com\/support\/create-a-disable-usb-storage-policy-for-linux\",\"name\":\"Create a Disable USB Storage Policy for Linux - JumpCloud\",\"isPartOf\":{\"@id\":\"https:\/\/jumpcloud.com\/#website\"},\"datePublished\":\"2023-06-05T17:12:07+00:00\",\"dateModified\":\"2023-06-05T17:12:07+00:00\",\"description\":\"Learn how to configure a policy to disable removable storage on Linux devices.\",\"breadcrumb\":{\"@id\":\"https:\/\/jumpcloud.com\/support\/create-a-disable-usb-storage-policy-for-linux#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/jumpcloud.com\/support\/create-a-disable-usb-storage-policy-for-linux\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/jumpcloud.com\/support\/create-a-disable-usb-storage-policy-for-linux#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/jumpcloud.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Support\",\"item\":\"https:\/\/jumpcloud.com\/support\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Create a Disable USB Storage Policy for Linux\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/jumpcloud.com\/#website\",\"url\":\"https:\/\/jumpcloud.com\/\",\"name\":\"JumpCloud\",\"description\":\"Daily insights on directory services, IAM, LDAP, identity security, SSO, system management (Mac, Windows, Linux), networking, and the cloud.\",\"publisher\":{\"@id\":\"https:\/\/jumpcloud.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/jumpcloud.com\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/jumpcloud.com\/#organization\",\"name\":\"JumpCloud\",\"url\":\"https:\/\/jumpcloud.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png\",\"contentUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png\",\"width\":598,\"height\":101,\"caption\":\"JumpCloud\"},\"image\":{\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/\"}}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Create a Disable USB Storage Policy for Linux - JumpCloud","description":"Learn how to configure a policy to disable removable storage on Linux devices.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/jumpcloud.com\/support\/create-a-disable-usb-storage-policy-for-linux","og_locale":"en_US","og_type":"article","og_title":"Create a Disable USB Storage Policy for Linux","og_description":"Learn how to configure a policy to disable removable storage on Linux devices.","og_url":"https:\/\/jumpcloud.com\/support\/create-a-disable-usb-storage-policy-for-linux","og_site_name":"JumpCloud","og_image":[{"width":890,"height":525,"url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2024\/07\/202405-MISC-JumpCloudHelpCenter-SiteDisplay-min-2.png","type":"image\/png"}],"twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"4 minutes","Written by":"pamkellman"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/jumpcloud.com\/support\/create-a-disable-usb-storage-policy-for-linux","url":"https:\/\/jumpcloud.com\/support\/create-a-disable-usb-storage-policy-for-linux","name":"Create a Disable USB Storage Policy for Linux - JumpCloud","isPartOf":{"@id":"https:\/\/jumpcloud.com\/#website"},"datePublished":"2023-06-05T17:12:07+00:00","dateModified":"2023-06-05T17:12:07+00:00","description":"Learn how to configure a policy to disable removable storage on Linux devices.","breadcrumb":{"@id":"https:\/\/jumpcloud.com\/support\/create-a-disable-usb-storage-policy-for-linux#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/jumpcloud.com\/support\/create-a-disable-usb-storage-policy-for-linux"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/jumpcloud.com\/support\/create-a-disable-usb-storage-policy-for-linux#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/jumpcloud.com\/"},{"@type":"ListItem","position":2,"name":"Support","item":"https:\/\/jumpcloud.com\/support"},{"@type":"ListItem","position":3,"name":"Create a Disable USB Storage Policy for Linux"}]},{"@type":"WebSite","@id":"https:\/\/jumpcloud.com\/#website","url":"https:\/\/jumpcloud.com\/","name":"JumpCloud","description":"Daily insights on directory services, IAM, LDAP, identity security, SSO, system management (Mac, Windows, Linux), networking, and the cloud.","publisher":{"@id":"https:\/\/jumpcloud.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/jumpcloud.com\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/jumpcloud.com\/#organization","name":"JumpCloud","url":"https:\/\/jumpcloud.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/","url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png","contentUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png","width":598,"height":101,"caption":"JumpCloud"},"image":{"@id":"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/"}}]}},"_links":{"self":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support\/74702"}],"collection":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support"}],"about":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/types\/support"}],"author":[{"embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/users\/206"}],"version-history":[{"count":3,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support\/74702\/revisions"}],"predecessor-version":[{"id":79568,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support\/74702\/revisions\/79568"}],"wp:attachment":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/media?parent=74702"}],"wp:term":[{"taxonomy":"support_category","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support_category?post=74702"},{"taxonomy":"support_tag","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support_tag?post=74702"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/coauthors?post=74702"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}