Make USB mount read only.

Hello again,
I am looking to make any USB mounted devices read only by default. Is there a way to do this in Leopard?

Greetings,
While you can make a USB device read only, you can't make a port read only. There are ways to disable a USB port, but that's about it.
You can also use a OS X Server and with it, you can deny access to the device, but to make it (the port) read only, I don't think that's possible with any OS. You could mark the internal hard drives read only, as well, but that would be a major pain.
I have hundreds of machines, and the open labs are the only ones I disallow the use of USB devices for security reasons, PeeCee or Mac. Using the OS X Server, we can apply restrictions, as I do with Active Directory for the PeeCees.
Cheers,
M.

Similar Messages

  • Make a volume mount read-only

    Rather than dig for my Mac OS X Server DVD, I find it easier to clone the disc onto a small partition on a hard drive.
    However, the volume always mounts read-write, and I always get warnings about low disk space because of it. (I made the partition as small as possible.) Plus, I don't want to have anything mess with my Mac OS X Server "DVD".
    I noticed that Mac OS X doesn't use fstab for mounting volumes… is there a way to make a disc mount read-only all of the time? (chmod -R a-w * doesn't cut it for me.)

    I don't mean having it mount read-only when booting from it. I mean, while the server is running normally (not booted from the "disc").
    For peace of mind, I'd like to have my "disc" always be read-only, just to make sure that it isn't modified unless I explicitly allow it.
    On Linux, I could add "ro" to the mount options. Since Mac OS X doesn't use fstab, is there some plist that determines how volumes are mounted? I'd rather not edit the /etc/rc.* files unless absolutely necessary.

  • 10.5.2 mount USB-Drive read only while booting

    Hi,
    since the update to 10.5.2 my usb drive is always mounted read only if it is connected while booting.
    If I connect it after booting or unmount and remount it after booting everything works fine.
    Any ideas?
    thx
    Bapf
    Message was edited by: Bapf

    strangely enogh ... the last two boots it worked again
    I hope it stays that way

  • Sanyo Phone always mounts read-only

    I recently purchased a Sanyo M1 phone that has a USB mass storage mode.
    The phone has 1GB of internal memory that is formatted with FAT16. When connected via a USB cable, a "SANYO" drive appears on the desktop, and is labeled "/Volumes/SANYO".
    This drive shows as locked in the finder, and the permissions information says "You can only read."
    Going to the command line, shows that it is mounted read-only:
    /dev/disk2s1 on /Volumes/SANYO (local, nodev, nosuid, read-only)
    If I attempt to remount it as read-write:
    Lappy-386:~ greg$ mount -u -o rw /dev/disk2s1
    mount_msdos: /dev/disk2s1: Resource busy
    Lappy-386:~ greg$ sudo !!
    sudo mount -u -o rw /dev/disk2s1
    mount_msdos: /dev/disk2s1: Resource busy
    I have heard that this may be because Mac OS doesn't react well to devices that don't respond to it's mode sensing. I don't really care about mode sensing, I care about being able to forcibly mount this device as read-write, as it works perfectly well in Windows (even under Parallels) and Linux.
    For a platform that prides itself on 'plug it in and it works', not being able to plug in a simple mass storage device is a huge mistake. What's even worse is that there is no option to forcibly mount it as read-write, and there is no error message that tells you why it is mounted read only. The console (in system.log) has:
    Apr 18 14:16:46 Lappy-386 kernel[0]: USBF: 691451.613 AppleUSBEHCI[0x4344000]::Found a transaction past the completion deadline on bus 253, timing out!
    The question is, how do I make this device show up read-write? Who can I contact at Apple to explain this problem? I do have AppleCare.
    MacBook   Mac OS X (10.4.9)  

    Any ideas...?
    MacBook Mac OS X (10.4.6)

  • How to attach an external USB drive read-only

    I would like to hook up an external USB hard drive and would like to do so in such a manner as to ensure that absolutely nothing is modified on the drive at all. Is there some way I can specify this before I connect the drive or while I plug it in? (e.g. hold down the shift key or something like that.) I have found all sorts of posts from folks who wanted to know how to turn off read-only mode, but haven't had much luck finding out how to turn it on.
    I noticed recently when I plugged in a USB stick that it sat and blinked for some time. I'm guessing that OS X was busy indexing the drive. I'm not sure if the index was written back to the USB stick, or cached somewhere locally. If it was written back to the USB stick, I would like to prevent this from happening when I plug in a real drive.
    Thanks for any tips you can give me.
    --wpd

    If the drive is formatted NTFS, it will automatically mount read-only. If it is formatted HFS+ or FAT, I don't know of any way to external drives to mount read-only without installing OS X Server for $500.

  • How can I make Keynote files read-only (eg: to share with students)?

    I would like to share some keynote files with students, and I would like to set them up as read-only, so that the students can tap the screen, read my presentation, but not alter it.  I've tried to set the files up as read-only on my iMac desktop, but when I load the file onto my iPad, it's still editable.
    Any ideas re: how to make Keynote files read-only?
    I've tried to export the files as PDF and load them into iBook, but some of Keynote's basic "build" functions won't work this way.  Specifically, I have files set up with questions and answers (ie - a question appears, and you have to tap the screen to see the answer, but this "build" function seems to disappear when I get it to show up in iBook).
    Any ideas how to make Keynote files read-only?  I am happy to use another program, but I want the students to tap the screen in order to see the answer to a question.
    Thanks!

    as long as $PATH is set, you shouldn't need to reconnect them (i think).  if you send the list of apps through | awk -F '/' '{print $NF}' | that'll strip the path
    /edit: added the "(i think)" part
    Last edited by brisbin33 (2009-06-02 21:33:06)

  • Make Sticky Notes Read-Only After Creation?

    Hello,
    I am wondering if there is a way to make sticky notes read only after someone has created one?
    I have a form that we want people to add comments to but we don't want anyone to be able to remove those comments.  Possible?
    Kristi Tost

    Resolved it : in click event javascript
    ADOBE_DATA.form.field.access = "readOnly";

  • 1) Make the column read only without coding

    Please guid eme how to make the column read only in the list without using the coding.
    Vij

    Basically, the answer is that you can't.  There are ways to change a specific list view to make a column readonly by replacing the form with a custom DataView form.  But that only applies to that view and since users can create their own views,
    those views would have read/write access to the column if the user has read/write access to the item.  SharePoint only supports security down to the item level out of the box and not down to the individual column level.
    Paul Stork SharePoint Server MVP
    Principal Architect: Blue Chip Consulting Group
    Blog: http://dontpapanic.com/blog
    Twitter: Follow @pstork
    Please remember to mark your question as "answered" if this solves your problem.

  • "underlying task reported failure..." & "root device is mounted read-only"

    My ibook is not starting up. It was having problems loading up and getting in interminable spinning ball fits as I tried to use the computer for basic things like surfing internet, word processing, itunes. I ran disk repair several times, and the problems would resume. Finally I left it on, afraid to turn it off, but my boyfriend unplugged it, and it eventually ran out of juice. Now I hear it power up, but it doesn't start up all the way (it's gotten to different points in start-up process after I took each step below, but never all the way).
    What I've tried so far:
    1. I've run disk repair from the start-up disk, and got the "The underlying task reported failure on exit" message.
    2. I did the archive reinstall, did not work either. Tried disk repair again and still getting same message as #1.
    3. Also tried starting up in single-user mode and running fsck, but getting message "root device is mounted read-only." Not sure what this means. Ran disk repair again after this, gets me same message as #1.
    I'm hesitant to do a complete reinstall, as I have documents and music files that haven't been backed up. I have an external hard drive to move files if I could just start up my computer.
    My questions:
    1) Any thing else I can try short of complete reinstall to fix the problem?
    2) Any way I can save my files if I can't get the computer fully loaded?
    3) Would a 3rd-party disk repair program allow me to fix the problem without wiping out my files?
    4) Why is fsck not running?
    Any advice would be appreciated!

    Hi, tgt. DiskWarrior would be a good bet to fix the "keys out of order" errror, if things haven't gotten much worse since you saw that message. You can order it direct from its developer, Alsoft, or you can call around to Mac dealers in your area to see if one carries it. If you already have a bootable external hard drive with OS X 10.3.9 or better installed on it, you can boot to the external drive, buy DW from Alsoft via download, install it on the external drive, and use it to therapize the internal drive. If you don't have an external drive with 10.3.9 or better installed, you'll need the DW CD to start up from.
    To shut your computer down while it isn't working properly, just press and hold down the power button for a few seconds.

  • Unable to make Quantity Column Read-Only in PO Lines in R12 iProcurement

    Hello Everyone,
    My Requirement is if a PO is coming from a requisition and it has Requisition Number populated in PO Distribution, I want to make Quantity column Read only in the PO Lines. This column can be updated for all the lines in standard page by clicking Update button(which makes Quantity enterable).
    I have tried following using SPEL Binding. But it seems SPEL Binding is not working as expected. I am pasting the code below :
    I have created a Transient Attribute of Boolean Type in the VO and have placed it in SPEL Binding for the Quantity Bean. On click of Update button I am conditionally setting the transient VO attribute to False.
    if(oapagecontext.getParameter("UpdateButton") != null){
    super.processFormRequest(oapagecontext, oawebbean);
    OAViewObject vo=(OAViewObject)am.findViewObject("PoDistributionsMergeVO");
    String x=(String)vo.first().getAttribute("OnlineReqNumber");
    OAMessageTextInputBean msgTextBean = (OAMessageTextInputBean)oawebbean.findIndexedChildRecursive("QuantityOrdered");
    Row row=vo.first();
    if (x!=null) {          
    do{
    row.setAttribute("QuantityRendered",Boolean.FALSE);
    row=vo.next();
    }while(row!=null);
    Thanks in Advance,
    Abhishek Mishra

    Abhishek,
    Your code seems pretty fine. There are few things
    1) Post the Spell, which you have attached with the rendered property.
    2) Had you initialized your VO (where your transient variable exists).
    For a work around i would suggest you to create a new VO and create a transient variable. Now try the same using this VO.
    Regards,
    Gyan

  • Why is SD Card mounted Read-only?

    Hey all.  I've had my HTC Incredible for about 6 months.  Recently upon starting it up I get the message something like "There is a problem with your SD Card, it has been mounted Read-only".  I have taken it out and tried to reseat it with no change.  Any idea?  Thanks.

    I have had the HTC thunderbolts for about a month now and I got this problem today. I was on the phone with tech support for a while and was not able to fix it (due to I do not want to loose my pictures on my sd card) so I have to go into a store tomrw and see a tech person...idk what happen, but my phone did this on its own mid day.

  • USB Drive Mounts Read Only

    For some reason now on all my Linux systems but particularly Arch Linux, my USB thunb drive gets auto mounted in Gnome when I plug it in but for some reason it's 'read only'.
    [carlos@tuna ~]$ cd /media/usb/
    [carlos@tuna usb]$ ls -l
    total 3722352
    drwx------ 2 carlos users 8192 Feb 11 10:34 files
    drwx------ 2 carlos users 8192 Feb 13 20:32 movies
    drwx------ 2 carlos users 8192 Jan 31 19:18 music
    drwx------ 4 carlos users 8192 Feb 11 10:34 pics
    drwx------ 2 carlos users 8192 Jan 28 12:17 tv
    -rw-r--r-- 1 carlos users 1564807588 Feb 14 17:40 WELCOM~1.AVI
    /dev/sdg1 on /media/usb type vfat (rw,nosuid,nodev,uhelper=udisks,uid=1000,gid=100,shortname=mixed,dmask=0077,utf8=1,showexec,flush)
    Both on CLI & through my Gnome file browser (Nautilus), I can't re-name, delete, or create new files. I don't understand what has changed. I then tested this on a spare laptop running Ubuntu 10.10 and it too has the same issue.
    Can anyone please explain this to me or help me resolve this problem?

    Correct. In both cases (CLI & GUI) I can't remove, add, or change existing files:
    [carlos@tuna ~]$ cd /media/
    [carlos@tuna media]$ ls -l
    total 8
    drwx------ 9 carlos users 8192 Dec 31 1969 CORSAIR
    [carlos@tuna media]$ cd CORSAIR/
    [carlos@tuna CORSAIR]$ ls -l
    total 3722352
    drwx------ 2 carlos users 8192 Feb 11 10:34 files
    drwx------ 2 carlos users 8192 Feb 13 20:32 movies
    drwx------ 2 carlos users 8192 Jan 31 19:18 music
    drwx------ 4 carlos users 8192 Feb 11 10:34 pics
    drwx------ 2 carlos users 8192 Jan 28 12:17 tv
    -rw-r--r-- 1 carlos users 1564807588 Feb 14 17:40 WELCOM~1.AVI
    [carlos@tuna CORSAIR]$ rm WELCOM~1.AVI
    rm: cannot remove `WELCOM~1.AVI': Read-only file system
    I can't even change the permissions on the file:
    chmod: changing permissions of `WELCOM~1.AVI': Read-only file system

  • HOW TO MAKE FIELDS AS READ ONLY IN TABLE MAINTAINANCE

    HI ABAPers,
    HOW TO MAKE SOME FIELDS AS DISPLAY MODE.
    FOR SUPPOSE, THERE ARE 5 FIELDS in SM30.
    AMONG THEM 1 FIELD SHUD BE USED FOR EDITING AND THE OTHER 4 FIELDS SHUD ONLY BE USED FOR DISPLAY PURPOSE
    WHEN EVER I ENTER A VALUE IN THAT 1 PARTICULAR FIELD THEN THE DATA OF THE REMAINING 4 FIELDS SHUD BE DISPLAYED IN THE SAME SCREEN ITSELF.
    HOW CAN IT BE POSSIBLE...
    PLZ HELP.
    THNX IN ADV,
    SP.

    Hello SP,
    You can create a maintenance view for the table & here you can define the maintenance attribute for individual fields.
    For the fields you want to be READ-ONLY pass 'R' to those fields. (It is the 4th column from the left, the one to the immediate left of the Key column).
    Don't change the TMG function group directly. If you regenerate the TMG the changes would be overwritten !
    You can use the Event '01' to fulfill your requirement:
    *&      Form  f_event_01
    *       text
    FORM f_event_01.
      DATA: v_indx TYPE sy-index,
            v_land1 TYPE land1,
            v_name1 TYPE name1.
      FIELD-SYMBOLS: <vendor> TYPE lifnr,
                     <val> TYPE ANY.
      BREAK-POINT.
      "TOTAL contains all data which are read, changed and created in TMG
      LOOP AT total.
        IF <action> = neuer_eintrag " New Entry.
        OR <action> = aendern "Changed entry
        OR <action> = original. "Same as DB
          READ TABLE extract WITH KEY <vim_xtotal_key>.
          IF sy-subrc = 0.
            v_indx = sy-tabix.
          ELSE.
            CLEAR v_indx.
          ENDIF.
          ASSIGN COMPONENT 'LIFNR' OF STRUCTURE total TO <vendor>.
          CHECK sy-subrc = 0.
    *     select data from the LFA1 based on LIFNR
          SELECT SINGLE name1 land1 FROM lfa1
            INTO (v_name1,v_land1)
            WHERE lifnr = <vendor>.
          CHECK sy-subrc = 0.
    *     Populate the hidden fields NAME1 & LAND1
          ASSIGN COMPONENT 'NAME1' OF STRUCTURE total TO <val>.
          CHECK sy-subrc = 0.
          <val> = v_name1.
          ASSIGN COMPONENT 'LAND1' OF STRUCTURE total TO <val>.
          CHECK sy-subrc = 0.
          <val> = v_land1.
          MODIFY total.
          CHECK v_indx GT 0.
          extract = total. "Pass the changes in TOTAL to EXTRACT
          MODIFY extract INDEX v_indx.
        ENDIF.
      ENDLOOP.
      sy-subrc = 0.
    ENDFORM.                                                    "f_event_01
    BR,
    Suhas
    Edited by: Suhas Saha on Aug 16, 2010 11:58 AM

  • Make CA database read-only?

    Is it possible to make Firefox not accept any new Certificate Authorities without user interaction?
    Long story short, I have having a problem where Firefox is adding a CA to it's database that is hosing things up. The actual problem is with the cert that is being offered to me, and I am working with that system owner to fix the cert, but in the mean time I would like to have Firefox not ever load the CA into it's database. This new CA is added without the user being prompted at all. Simply visiting a specific website causes this new CA to be added to the list (but again, not trusted, just added to the list).
    By default when it is loaded the new cert has no permissions so it is not trusted, but the problem is the fact that the CA that is added is a duplicate name with another known good CA in my list and it causes things to go wacky when there are two with the same name (different signatures, different issuer, the only thing the same is the nickname).
    I know this isn't a problem with Firefox directly. In 99.9999% of cases when it adds an additional CA to the list it doesn't cause a problem at all because it is not trusted and it won't inherently allow the secure connection. But since fixing the real problem with the owner of the website is going to take a long time (weeks/months) I would like to put a band-aid on the symptom so that I can cut my maintenance of this topic down greatly.
    I am running Red Hat Enterprise Linux 5.9 with Firefox 10.0.12 (RHEL distributed Firefox).
    I could go into extreme detail to explain what is causing my problem, but the short question I have is "Is there a way to make the CA database read-only"?
    I have tried editing the permissions of cert8.db in ~/.mozilla/firefox/*.default/ to only be readonly (0400) vice read-write (0600) currently. However this causes Firefox to have kittens when I try to use anything that reads the CA list so I had to change it back.
    I have a hacky script to remove the CA using certutil, but since certutil uses the 'nickname' of the cert to decide which one to delete, and both the good cert and the bad cert have the same nickname I get worried I'll blow away the good one and not the bad one. So far it has consistently matched the bad cert, but I don't have enough confidence that it will do that every time to push it out to my users. If I could use certutil -D with something more specific than nickname (fingerprint, signature value, etc) I would be OK with that as well.
    I know there are options to restrict user changes to things like proxies and the such, is there a similar way to do it with CAs? about:config doesn't appear show anything that looks like it would do it.
    Can I have it prompt me when it tries to add a CA to the database and allow me to say yes/no?
    I am OK if the change is something that requires manual intervention if we do decide to add another CA to the list. Currently I am having to repair this problem multiple times a day and new CAs don't come all that often.
    Unfortunately, I can't simply upgrade to the latest Firefox as software restrictions are in place. I'm open to any ideas you may have.

    Seems unlikely two unrelated CA or sub-CA certs would have the exact same issuer name. Was the name too generic? If they actually related and I assume created by your organization perhaps you could simply add the "Integration CA 456" certificate to your root store -- assuming you trust it.
    Firefox validates certificate chains by looking up issuers, and in case of duplicates by default it grabs the one with the most recent "Not Before" date. There is a newer algorithm under development that won't stop at the first match but will continue to trying intermediate combinations until it finds a match or runs out of options. If you'd like to try it you need to add the boolean preference "security.use_libpkix_verification" and set it's value to true. This pref will not appear in about:config by default, but you can right-click in about:config to add it.

  • Make a field read-only after selection made

    I have the below code:
    var currency =  topmostSubform.IFFPage3.Page.Body.rdoDefaultCurrency.rawValue;
    topmostSubform.IFFPage6.Page.FirstCustomer.cboBasicGrossEarningsCurrency.rawValue = currency;
    topmostSubform.IFFPage6.Page.FirstCustomer.cboOvertimeBonusCurrency.rawValue = currency;
    topmostSubform.IFFPage6.Page.FirstCustomer.cboFeesCurrency.rawValue = currency;
    topmostSubform.IFFPage6.Page.FirstCustomer.cboEarnedOtherCurrency.rawValue = currency;
    I need the ones =currency to be read only. Is there a way to make them readonly? I dont want them to be able to change the drop down after a master currency is selected.

    Use the 'access' property. YourField.access="protected" and YourField.access="open".
    Kyle

Maybe you are looking for

  • Voice memos folder syncing issues

    (I'm on Windows 7 64-bit, iTunes 11, iPhone 4S) I deleted all the voice memos from my iTunes library by mistake but did not delete the files from my computer. Now, trying to restore them to the library this is what happened: - I dragged and dropped t

  • Organize iPod by album artist?

    Hello, Is it possible to change the view on my iPod to show artists listed as Album Artist instead of simply Artist? I know this can be done on iTunes but I can't find a way to do it on my iPod Classic. Even my old Zune could organize by Album Artist

  • Member not found error while loading data

    Hi All, I created a data load file and loaded data to the cube from EAS. I have some member's having all measure values as zero as shown below: "1018"     0     0     0     294.4739236 "1019"      0      0     0     0 Data is loading properly for mem

  • Bridge, Lightroom, InDesign workflow question

    Hey everyone, I've been using Adobe InDesign CS5 and Apple's Aperture software together (on a Mac) to do design projects over the past year and a half or so. I'd never been that interested in Adobe's other applications until recently, when I got a Cr

  • Moving selected objects leave distracting marks

    Here's what I mean >> http://tinypic.com/r/o8t1xl/8 The video above is recorded with Bandicam and with mouse hidden. What I did in the video is just moving a black square around with transform controls on. Thing that happens after every stop I do is