USB Permissions

TranslationThe pending.USB Permissions component lets you allow specific USB devices or device classes.

Configuration

Device Settings

Setting
Value
Explanation
USB Input Devices

Allow

Allow

Permissions for all USB HID devices (e.g., keyboards or mice)

Override settings for specific devices.

USB storage devices

Allow

Deny

Permissions for all USB mass storage devices (e.g., USB flash drives or external hard drives)

Override settings under Specific Devices...

Comma-separated list

Comma-separated list of USB IDs and/or serial numbers.

It'll take precedence over previous settings.

Comma-separated list

Comma-separated list of USB IDs and/or serial numbers.

It'll take precedence over previous settings.

Allow

Allow

Set permissions for USB devices unaffected by previous settings.

Yes

No

Display information about blocked devices in a pop-up.

Information about blocked devices

If a device is blocked after connection, the system writes an error message to the syslog. Use the log viewer for the affected thin client in openthinclient Management to view this message.

If the "Show error messages" setting is enabled, the client also displays a pop-up message.

The message contains the USB ID and the device serial number. Use one of these values to configure authorization for the specific device.

Determining the USB ID

There are two options for determining the USB ID of a device connected to a thin client:

1. System Information

Open System Information from the System menu  Open the "USB Devices" tab Search for the device by device class and name, and copy the USB ID using the Copy button

2. lsusb At the command line

Open a terminal on the ThinClientCTRL+ALT+T. Execute the command 

lsusb

Find the correct USB ID based on the device name.

3. Confirmation message for restricted devices

Configure the system to allow only the desired device or its class, then generate an error message with the USB ID for that device.