Disable USB flash drive

For Developers
1

Hi,
I am trying to create a hotplug rule to block any USB device which is inserted or plugged in on boot.

I added the following:

root@XXXXX:~# cat /etc/hotplug.d/usb/01_usb_block.sh 
#!/bin/sh

[ "$DEVTYPE" = usb_device ] && [ "$ACTION" = bind ] && {
    /bin/sh -c 'for host in /sys/bus/usb/devices/usb*; do echo 0 > $host/authorized_default; done'
}

[ "$DEVTYPE" = usb_device ] && [ "$ACTION" = add ] && {
    /bin/sh -c 'for host in /sys/bus/usb/devices/usb*; do echo 0 > $host/authorized_default; done'
}

exit 0

If i plugin USB flash drive after system is running i get notification that device is not authorized.
But if i boot system with USB flash drive pluged in - it gets mounted

USB FTDI adatpter works properly.

Please advise how to prevent this.

Regards,
Boris

2
  • remove usb support from image ?
  • add usb modules to blacklist ?
  • rmmod the modules in rc.local ?
3

disable all USB devices by deafult that are inserted after system booted, and enable only specific vendors

4

that would have to be scripted...

ismod the usb kmods post boot ?

5

I already added hotplug rule to enable specific FTDI device and it works.
I have issue with USB flash drive, if i leave it plugged in and reboot router, it gets mounted...i thought that if i created hotplug rule to disable all USBs it will work for flash drive as well

6

that's not standard openwrt behavior though.

I would have expected the same.
what version are you running ?

7

i have a requirement to block everything plugged in to router, except FTDI adapter

8

try rereading what I just wrote, and answer the question.

9

r16279-5cc0535800

10

21.02.0, you might want to consider upgrading to .5

again, automount isn't enabled (not even installed, AFAIK) by default, if it's there, you put it there,
might even be contra productive, if you're not going to allow any USB storage "at all".

1 Like
11

Automount is probably enabled as it is a Teltonika router, i will try to disable it
Thanks!

12

It appears you are using firmware that is not from the official OpenWrt project.

When using forks/offshoots/vendor-specific builds that are "based on OpenWrt", there may be many differences compared to the official versions (hosted by OpenWrt.org). Some of these customizations may fundamentally change the way that OpenWrt works. You might need help from people with specific/specialized knowledge about the firmware you are using, so it is possible that advice you get here may not be useful.

You may find that the best options are:

  1. Install an official version of OpenWrt, if your device is supported (see https://firmware-selector.openwrt.org).
  2. Ask for help from the maintainer(s) or user community of the specific firmware that you are using.
  3. Provide the source code for the firmware so that users on this forum can understand how your firmware works (OpenWrt forum users are volunteers, so somebody might look at the code if they have time and are interested in your issue).

If you believe that this specific issue is common to generic/official OpenWrt and/or the maintainers of your build have indicated as such, please feel free to clarify.

2 Likes
13

This topic was automatically closed 10 days after the last reply. New replies are no longer allowed.