请教一下各位前辈，debian8、debian9如何禁止使用U盘拷贝，但是USB键盘鼠标可以使用？有没有做过相关防护的做一下指点？
把usb-storage相关模块全禁用掉试试
把模块blacklist掉 再把模块文件移走或删除 这样想手动加载也不行
$ ls /lib/modules/4.13.0-0.bpo.1-amd64/kernel/drivers/usb/storage
uas.ko ums-eneub6250.ko ums-karma.ko ums-sddr55.ko
ums-alauda.ko ums-freecom.ko ums-onetouch.ko ums-usbat.ko
ums-cypress.ko ums-isd200.ko ums-realtek.ko usb-storage.ko
ums-datafab.ko ums-jumpshot.ko ums-sddr09.ko
$ grep "USB" /boot/config-4.13.0-0.bpo.1-amd64 | grep STORAGE
# NOTE: USB_STORAGE depends on SCSI but BLK_DEV_SD may
# also be needed; see USB_STORAGE Help for more info
CONFIG_USB_STORAGE=m
# CONFIG_USB_STORAGE_DEBUG is not set
CONFIG_USB_STORAGE_REALTEK=m
CONFIG_USB_STORAGE_DATAFAB=m
CONFIG_USB_STORAGE_FREECOM=m
CONFIG_USB_STORAGE_ISD200=m
CONFIG_USB_STORAGE_USBAT=m
CONFIG_USB_STORAGE_SDDR09=m
CONFIG_USB_STORAGE_SDDR55=m
CONFIG_USB_STORAGE_JUMPSHOT=m
CONFIG_USB_STORAGE_ALAUDA=m
CONFIG_USB_STORAGE_ONETOUCH=m
CONFIG_USB_STORAGE_KARMA=m
CONFIG_USB_STORAGE_CYPRESS_ATACB=m
CONFIG_USB_STORAGE_ENE_UB6250=m
CONFIG_USB_GADGET_STORAGE_NUM_BUFFERS=2
CONFIG_USB_F_MASS_STORAGE=m
CONFIG_USB_CONFIGFS_MASS_STORAGE=y
# CONFIG_USB_MASS_STORAGE is not set