how to disable dvd-rom drive?

[fizan]

# ioscan -funC disk
Class I H/W Path Driver S/W State H/W Type Description
============================================================================
disk 0 0/0/2/0.0.0.0 sdisk CLAIMED DEVICE TEAC DV-28E-C
/dev/dsk/c0t0d0 /dev/rdsk/c0t0d0

[Michal Kapalka (mikap)]

hi,

disable for some users, or permanently disable ??

mikap

[fizan]

due to audit purpose, now it should be disabled and in future if we need then again to enable it?

Thanks

[Michal Kapalka (mikap)]

hmm you could change the permition to 000.

mikap

[fizan]

but that is not the right way? to disable.. any alternate way.

[fizan]

cd /dev/dsk
chmod 000 c0t0d0
right.. they are not accepting?

how to disable it.?


Thanks

[Michal Kapalka (mikap)]

hi,

if you will delete the special file from the device, after reboot it will be renewed.

I think, the audit is also about physical security, so nobody can't mount a cdrom if there is not a CD/DVD medium.

The second option is to disconnect the dvd drive on HW level.

mikap

[Michal Kapalka (mikap)]

hi,

ok you could change the permition only for the root user.

mikap

[fizan]

no the server will not be rebooted if we can do we restart the service, mikap

in h/w level, we should unplug the id scsi cable connecting to dvd drive right?

[Michal Kapalka (mikap)]

hi,

so if you don't reboot the server

make rmsf -H ( HW_PATH of dvd/cd )

mikap

PS : yes yous unplug the cable from drive.