Block removable media - almost useless as is?

Hello,

The 'Block removable media' feature is mostly useless as it is currently implemented.

There needs to be more fine-grained control. Most importantly, there needs to be a way to treat *storage* - ie, floppy/CD/DVD drives - media differently from *non*-storage media - ie, USB keyboards, mice, printers...

Something like:

For all removable storage media:

[x] Block all access [x] Allow read-only access

[x] Always allow access to USB keyboards, mice and printers

Where should I go to make this feature request?

 

Re: Block removable media - useless as is?

It should go in the "Future Changes to EAV" forum sticky post:

https://www.wilderssecurity.com/showthread.php?t=197994

 

Re: Block removable media - useless as is?

That is silly... having one big thread for *all* feature requests is certainly one way to make sure that all feature requests are immediatley lost in a maze.

There should be a dedicated forum called 'Feature Requests', where each request is its own thread.

Anyway, posted there, too bad it'll disappear in a few hours/day or three...

 

That option will not block a usb keyboard/mouse. It blocks USB removable media, not usb keyboards or other usb connected devices. But the read only option would be a nice suggestion. According to this thread they are improving this functionality so maybe they pick this suggestion up, who knows.

 

I could have sworn I couldn't get a USB printer working with this enabled, and ass-u-me-d that it would block keybds/mice too... I'll have to check again.

Thanks...

 

Indeed this should have been posted in Future Changes to EAV thread as suggested.

 

The purpose of blocking removable media is to completely eliminate the possibility of Autorun-like trojans being executed. Blocking other devices not carrying data as well as providing only read access to removable media would not serve any security purpose.