{"id":87857,"date":"2023-05-23T15:34:13","date_gmt":"2023-05-23T19:34:13","guid":{"rendered":"https:\/\/jumpcloud.com\/?post_type=support&#038;p=87857"},"modified":"2023-06-05T13:09:59","modified_gmt":"2023-06-05T17:09:59","slug":"manage-removable-storage-on-linux-devices","status":"publish","type":"support","link":"https:\/\/jumpcloud.com\/support\/manage-removable-storage-on-linux-devices","title":{"rendered":"Manage Removable Storage on Linux Devices"},"content":{"rendered":"\n<p>The file manager on Linux devices supports all removable media that have the following characteristics:<\/p>\n\n\n\n<ul>\n<li>The removable media has an entry in the<strong>&nbsp;<\/strong><code>\/etc\/fstab<\/code>&nbsp;file.<\/li>\n\n\n\n<li>The user option is specified in the entry for the removable media in the&nbsp;<code>\/etc\/fstab<\/code>&nbsp;file.<\/li>\n\n\n\n<li>A hotplug daemon detects and auto mounts USM mass storage devices such as cameras, sticks, and flash memory readers inside the <code>\/mnt<\/code> or <code>\/media<\/code> locations.<\/li>\n<\/ul>\n\n\n\n<p>JumpCloud provides a policy that allows you to block any USB mass storage device with these characteristics.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Create a Linux Removable Storage Policy<\/strong><\/h2>\n\n\n\n<p>Normally, when the Linux file manager detects new media, an object for the media is added to the desktop. After you apply this policy to a device and reboot it, the Linux file manager won&#8217;t mount any USB that the user inserts.<\/p>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card note\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/note-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Note:<\/strong> \n<ul>\n<li>To apply a policy to a device, it must be running on a supported OS.&nbsp;Before you assign a policy, you can follow the instructions in <a href=\"https:\/\/jumpcloud.com\/support\/get-started-devices\">Get Started: Devices<\/a>.<\/li>\n\n\n\n<li>To apply a policy to a group of devices, you must define system groups. Before you assign a policy, you can follow the instructions in <a href=\"https:\/\/jumpcloud.com\/support\/get-started-user-groups\">Get Started: User Groups<\/a>.<\/li>\n<\/ul>\n <\/div><\/div><\/div><\/div>\n\n\n\n<p><strong>To create a Linux removable storage policy:<\/strong><\/p>\n\n\n\n<ol>\n<li>Log in to the JumpCloud Administrator Portal:&nbsp;<a target=\"_blank\" href=\"https:\/\/console.jumpcloud.com\/login\" rel=\"noreferrer noopener\">https:\/\/console.jumpcloud.com\/login<\/a>.<\/li>\n\n\n\n<li>Go to&nbsp;<strong>DEVICE MANAGEMENT<\/strong>&nbsp;&gt;&nbsp;<strong>Policy Management<\/strong>.<\/li>\n\n\n\n<li>Click (<strong>&nbsp;+&nbsp;<\/strong>).<\/li>\n\n\n\n<li>On the Configure New Policy panel<strong>,<\/strong>&nbsp;select&nbsp;<strong>Linux<\/strong>.<\/li>\n\n\n\n<li>To the right of&nbsp;<strong>Disable USB Storage<\/strong>&nbsp;click&nbsp;<strong>configure<\/strong>.<\/li>\n\n\n\n<li>(Optional) In the <strong>Policy Name<\/strong> field, enter a new name for the policy or keep the default. Policy names must be unique.<\/li>\n\n\n\n<li>(Optional) In the&nbsp;<strong>Policy Notes<\/strong> field, enter details like when you created the policy, where you tested it, and where you deployed it.<img decoding=\"async\" width=\"2296\" height=\"1592\" class=\"wp-image-87866\" style=\"width: 900px\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/05\/Linux_DisableUSBStorage_policy.png\" alt=\"\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/05\/Linux_DisableUSBStorage_policy.png 2296w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/05\/Linux_DisableUSBStorage_policy-300x208.png 300w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/05\/Linux_DisableUSBStorage_policy-1024x710.png 1024w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/05\/Linux_DisableUSBStorage_policy-768x533.png 768w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/05\/Linux_DisableUSBStorage_policy-1536x1065.png 1536w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/05\/Linux_DisableUSBStorage_policy-2048x1420.png 2048w\" sizes=\"(max-width: 2296px) 100vw, 2296px\" \/><\/li>\n\n\n\n<li>To apply the policy to one or more devices, click&nbsp;<strong>Devices<\/strong>. Next to&nbsp;<strong>System Name<\/strong>, select the options for all the devices where you want to apply this policy.<\/li>\n\n\n\n<li>To apply the policy to a defined group of devices, select the&nbsp;<strong>Device Groups&nbsp;<\/strong>tab. Next to&nbsp;<strong>Device Group Name<\/strong>, select the options for all the groups where you want to apply this policy.<\/li>\n\n\n\n<li>Click&nbsp;<strong>save policy<\/strong>.<\/li>\n\n\n\n<li>Restart all devices where you applied the removable storage policy.<\/li>\n<\/ol>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>View Policy Status<\/strong><\/h2>\n\n\n\n<p>After a policy is created and saved, it may take a few minutes for the policy to be enforced on the device. When the policy is running, you can view its status to determine&nbsp;if the policy has been successfully applied or it it requires your attention.<\/p>\n\n\n\n<p><strong>To view policy status:<\/strong><\/p>\n\n\n\n<ol>\n<li>Log in to the JumpCloud Administrator Portal:&nbsp;<a target=\"_blank\" href=\"https:\/\/console.jumpcloud.com\/login\" rel=\"noreferrer noopener\">https:\/\/console.jumpcloud.com\/login<\/a>.<\/li>\n\n\n\n<li>Go to&nbsp;<strong>DEVICE MANAGEMENT<\/strong>&nbsp;&gt;&nbsp;<strong>Policy Management<\/strong>.<\/li>\n\n\n\n<li>Click the&nbsp;<strong>Disable&nbsp;USB Storage&nbsp;<\/strong>policy&nbsp;that you just created.<\/li>\n\n\n\n<li>Click&nbsp;<strong>Status<\/strong>.<\/li>\n\n\n\n<li>To see the last Result Log for a device where this policy is applied, in the results list next to a device, click&nbsp;<strong>View<\/strong>.<\/li>\n<\/ol>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card note\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/note-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Note:<\/strong> \n<p>If an errors occur, they are listed in Exit Status. If you have an Exit Status of 0, no errors have occurred when applying or enforcing this policy.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Delete a Linux Removable Storage Policy<\/strong><\/h2>\n\n\n\n<p>There are&nbsp;several ways you can permit users to access removable storage devices after creating a policy to block access:<\/p>\n\n\n\n<ul>\n<li>If you want to allow users on a specific device to access storage devices, you can remove that device from the policy without removing the policy itself.<\/li>\n\n\n\n<li>You can also remove groups of devices from the&nbsp;policy without removing the policy itself.<\/li>\n\n\n\n<li>To allow all Linux devices managed by JumpCloud to access removable storage devices, you can remove the policy completely.<\/li>\n<\/ul>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card warning\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/warning-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Warning:<\/strong> \n<p>Remember that allowing users access to removable media poses risks, including data theft and the introduction&nbsp;of malware.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n<p><strong>To manage access to Linux removable storage:<\/strong><\/p>\n\n\n\n<ol>\n<li>Log in to the JumpCloud Administrator Portal:&nbsp;<a target=\"_blank\" href=\"https:\/\/console.jumpcloud.com\/login\" rel=\"noreferrer noopener\">https:\/\/console.jumpcloud.com\/login<\/a>.<\/li>\n\n\n\n<li>Go to&nbsp;<strong>DEVICE MANAGEMENT<\/strong>&nbsp;&gt;&nbsp;<strong>Policy Management<\/strong>.<\/li>\n\n\n\n<li>If you want to remove devices from the policy, click&nbsp;<strong>Disable<\/strong>&nbsp;<strong>USB Storage<\/strong>&nbsp;or the name that you gave this policy. Go to&nbsp;<strong>Devices<\/strong>. Clear the options for all devices that you want to remove. Click&nbsp;<strong>save policy<\/strong>.<\/li>\n\n\n\n<li>If you want to remove groups from the policy, click&nbsp;<strong>Disable<\/strong>&nbsp;<strong>USB Storage<\/strong>&nbsp;or the name that you gave this policy. Select the&nbsp;<strong>Device Groups&nbsp;<\/strong>tab. Clear the options for all groups that you want to remove. Click&nbsp;<strong>save policy<\/strong>.<\/li>\n\n\n\n<li>If you want to completely remove the policy, select&nbsp;<strong>Disable<\/strong>&nbsp;<strong>USB Storage<\/strong>, or the name you gave to this policy. Click&nbsp;<strong>delete<\/strong>. On the Delete Policy confirmation screen, click&nbsp;<strong>continue<\/strong>.<\/li>\n<\/ol>\n","protected":false},"excerpt":{"rendered":"<p>The file manager on Linux devices supports all removable media that have the following characteristics: JumpCloud provides a policy that [&hellip;]<\/p>\n","protected":false},"author":201,"featured_media":0,"template":"","meta":{"_acf_changed":false,"_oasis_is_in_workflow":0,"_oasis_original":0,"_oasis_task_priority":"","inline_featured_image":false,"footnotes":""},"support_category":[2852,2926,2862],"support_tag":[],"coauthors":[2835],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v22.9 (Yoast SEO v22.9) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Manage Removable Storage on Linux Devices - JumpCloud<\/title>\n<meta name=\"description\" content=\"Manage a Linux Disable USB Storage policy to prevent USB mass storage devices, such as flash drives and USB hard drives, from being used on a user&#039;s Linux device.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/jumpcloud.com\/support\/manage-removable-storage-on-linux-devices\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Manage Removable Storage on Linux Devices\" \/>\n<meta property=\"og:description\" content=\"Manage a Linux Disable USB Storage policy to prevent USB mass storage devices, such as flash drives and USB hard drives, from being used on a user&#039;s Linux device.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/jumpcloud.com\/support\/manage-removable-storage-on-linux-devices\" \/>\n<meta property=\"og:site_name\" content=\"JumpCloud\" \/>\n<meta property=\"article:modified_time\" content=\"2023-06-05T17:09:59+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/05\/Linux_DisableUSBStorage_policy.png\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"4 minutes\" \/>\n\t<meta name=\"twitter:label2\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data2\" content=\"alexsnyder\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/jumpcloud.com\/support\/manage-removable-storage-on-linux-devices\",\"url\":\"https:\/\/jumpcloud.com\/support\/manage-removable-storage-on-linux-devices\",\"name\":\"Manage Removable Storage on Linux Devices - JumpCloud\",\"isPartOf\":{\"@id\":\"https:\/\/jumpcloud.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/jumpcloud.com\/support\/manage-removable-storage-on-linux-devices#primaryimage\"},\"image\":{\"@id\":\"https:\/\/jumpcloud.com\/support\/manage-removable-storage-on-linux-devices#primaryimage\"},\"thumbnailUrl\":\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/05\/Linux_DisableUSBStorage_policy.png\",\"datePublished\":\"2023-05-23T19:34:13+00:00\",\"dateModified\":\"2023-06-05T17:09:59+00:00\",\"description\":\"Manage a Linux Disable USB Storage policy to prevent USB mass storage devices, such as flash drives and USB hard drives, from being used on a user's Linux device.\",\"breadcrumb\":{\"@id\":\"https:\/\/jumpcloud.com\/support\/manage-removable-storage-on-linux-devices#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/jumpcloud.com\/support\/manage-removable-storage-on-linux-devices\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/jumpcloud.com\/support\/manage-removable-storage-on-linux-devices#primaryimage\",\"url\":\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/05\/Linux_DisableUSBStorage_policy.png\",\"contentUrl\":\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/05\/Linux_DisableUSBStorage_policy.png\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/jumpcloud.com\/support\/manage-removable-storage-on-linux-devices#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/jumpcloud.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Support\",\"item\":\"https:\/\/jumpcloud.com\/support\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Manage Removable Storage on Linux Devices\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/jumpcloud.com\/#website\",\"url\":\"https:\/\/jumpcloud.com\/\",\"name\":\"JumpCloud\",\"description\":\"Daily insights on directory services, IAM, LDAP, identity security, SSO, system management (Mac, Windows, Linux), networking, and the cloud.\",\"publisher\":{\"@id\":\"https:\/\/jumpcloud.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/jumpcloud.com\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/jumpcloud.com\/#organization\",\"name\":\"JumpCloud\",\"url\":\"https:\/\/jumpcloud.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png\",\"contentUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png\",\"width\":598,\"height\":101,\"caption\":\"JumpCloud\"},\"image\":{\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/\"}}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Manage Removable Storage on Linux Devices - JumpCloud","description":"Manage a Linux Disable USB Storage policy to prevent USB mass storage devices, such as flash drives and USB hard drives, from being used on a user's Linux device.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/jumpcloud.com\/support\/manage-removable-storage-on-linux-devices","og_locale":"en_US","og_type":"article","og_title":"Manage Removable Storage on Linux Devices","og_description":"Manage a Linux Disable USB Storage policy to prevent USB mass storage devices, such as flash drives and USB hard drives, from being used on a user's Linux device.","og_url":"https:\/\/jumpcloud.com\/support\/manage-removable-storage-on-linux-devices","og_site_name":"JumpCloud","article_modified_time":"2023-06-05T17:09:59+00:00","og_image":[{"url":"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/05\/Linux_DisableUSBStorage_policy.png"}],"twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"4 minutes","Written by":"alexsnyder"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/jumpcloud.com\/support\/manage-removable-storage-on-linux-devices","url":"https:\/\/jumpcloud.com\/support\/manage-removable-storage-on-linux-devices","name":"Manage Removable Storage on Linux Devices - JumpCloud","isPartOf":{"@id":"https:\/\/jumpcloud.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/jumpcloud.com\/support\/manage-removable-storage-on-linux-devices#primaryimage"},"image":{"@id":"https:\/\/jumpcloud.com\/support\/manage-removable-storage-on-linux-devices#primaryimage"},"thumbnailUrl":"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/05\/Linux_DisableUSBStorage_policy.png","datePublished":"2023-05-23T19:34:13+00:00","dateModified":"2023-06-05T17:09:59+00:00","description":"Manage a Linux Disable USB Storage policy to prevent USB mass storage devices, such as flash drives and USB hard drives, from being used on a user's Linux device.","breadcrumb":{"@id":"https:\/\/jumpcloud.com\/support\/manage-removable-storage-on-linux-devices#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/jumpcloud.com\/support\/manage-removable-storage-on-linux-devices"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/jumpcloud.com\/support\/manage-removable-storage-on-linux-devices#primaryimage","url":"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/05\/Linux_DisableUSBStorage_policy.png","contentUrl":"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/05\/Linux_DisableUSBStorage_policy.png"},{"@type":"BreadcrumbList","@id":"https:\/\/jumpcloud.com\/support\/manage-removable-storage-on-linux-devices#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/jumpcloud.com\/"},{"@type":"ListItem","position":2,"name":"Support","item":"https:\/\/jumpcloud.com\/support"},{"@type":"ListItem","position":3,"name":"Manage Removable Storage on Linux Devices"}]},{"@type":"WebSite","@id":"https:\/\/jumpcloud.com\/#website","url":"https:\/\/jumpcloud.com\/","name":"JumpCloud","description":"Daily insights on directory services, IAM, LDAP, identity security, SSO, system management (Mac, Windows, Linux), networking, and the cloud.","publisher":{"@id":"https:\/\/jumpcloud.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/jumpcloud.com\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/jumpcloud.com\/#organization","name":"JumpCloud","url":"https:\/\/jumpcloud.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/","url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png","contentUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png","width":598,"height":101,"caption":"JumpCloud"},"image":{"@id":"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/"}}]}},"_links":{"self":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support\/87857"}],"collection":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support"}],"about":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/types\/support"}],"author":[{"embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/users\/201"}],"version-history":[{"count":3,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support\/87857\/revisions"}],"predecessor-version":[{"id":88344,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support\/87857\/revisions\/88344"}],"wp:attachment":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/media?parent=87857"}],"wp:term":[{"taxonomy":"support_category","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support_category?post=87857"},{"taxonomy":"support_tag","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support_tag?post=87857"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/coauthors?post=87857"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}