how to disable dvd-rom drive?

[SoorajCleris]

Hi Fizan,

I can see so many threads ...


» how to disable dvd drive?
» how to disable dvd-rom drive?
» how to check status of cd-drive ?

http://forums13.itrc.hp.com/service/forums/questionanswer.do?threadId=1360607
http://forums13.itrc.hp.com/service/forums/questionanswer.do?threadId=1360992
http://forums13.itrc.hp.com/service/forums/questionanswer.do?threadId=1360981

May I please know which one I should reply???
Did you get the answer ?

Regards,
Sooraj

[fizan]

boss ,

ultimate goal is to disable the drive.

[Pete Randall]

Try a hammer.


Pete

[Pete Randall]

Why do the auditors want to do this? Are they trying to prevent ordinary users from using the cd/dvd drive? Ordinary users are not allowed to mount the drive anyway, so, to them, it is effectively disabled.

We need a clearer answer as to what is trying to be accomplished.


Pete

[Hein van den Heuvel]

I'd say 'question to auditor'.
Let them explain why this is deemed a concern and explain how you addressed that concern, not the cd drive.

Surely this HPUX system is not 'out in the open' where an uncontrolled individual can slip in a DVD and opportunistically wait for a reboot? Show them the physical access methods in place.

Possibly focus on not being able to (automatically) boot from the DVD drive not that I would not know how without knowing the system. More details on the system will be more important than detail on the DVD drive itself.

Regards,
Hein.

[Torsten.]

I already asked in one of your other threads what you want to achieve ... you can set up your system that way that root only can mount the DVD. If this is not enough for you (for whatever reason), consider to disconnect the drive ...

[Dennis Handly]

>Torsten: you can set up your system that way that root only can mount the DVD.

This is the default.

[Torsten.]

I know.
That's why I asked for the reason why this drive should be "disabled".

[Dennis Handly]

>ME: This is the default.

>Torsten: I know.

Other than sudo or RBAC type solutions, do you know of any way the user can mount it?

[Torsten.]

I use sudo and a scripted mount/umount.