how to block usb mass storage in mac 10.11

Question

how to block usb mass storage in mac 10.11

HI I try to block usb mass storage in mac 10.11, and I following follow instruction however when I try to delete the files I got

Operation not permitted error. I try to use administor and root, but both had same error? any ideas?

"

Removing USB Support Software

Use the following instructions to remove USB mass storage device input/output

support such as USB Flash drives and external USB hard drives.

The removal of this kernel extension only affects USB mass storage devices. It does not

affect other USB devices such as a USB printer, mouse, or keyboard. This task requires

you to have administrator privileges.

Important: Repeat these instructions every time a system update is installed.

To remove kernel extensions for specific hardware:

1 Open the /System/Library/Extensions folder.

2 To remove support for USB mass storage devices, drag the following file to the Trash:

IOUSBMassStorageClass.kext

3 Open Terminal and enter the following command:

$ sudo touch /System/Library/Extensions

The touch command changes the modified date of the /System/Library/Extensions

folder. When the folder has a new modified date, the Extension cache files

(located in /System/Library/) are deleted and rebuilt by Mac OS X.

4 Choose Finder > Secure Empty Trash to delete the file.

5 Restart the system.

"

iMac, OS X El Capitan (10.11.2)

Posted on Dec 16, 2015 4:22 AM

Reply

Answer 1

Dec 16, 2015 7:52 AM in response to darkcloud1222

Those instructions are old, and predate El Capitan.

Shut off system integrity protection, and hope that following those directions don't completely clobber your system and/or your upgrades.

Have a backup of the system, and preferably also have a bootable external disk of some sort.

Depending on the situation, I'd also look at physical USB port locks — various types of those are available, and can be effective.

Reply

Answer 2

Dec 16, 2015 9:03 AM in response to MrHoffman

Thanks your reply.

I shut down system integrity protection but the IMAC still can do mount USB storage

But you mean there is no any solution for MAC to block the USB storage?

Thanks

Reply

Answer 3

Dec 16, 2015 1:49 PM in response to darkcloud1222

The steps you are following date back to OS X Snow Leopard, and reportedly aren't effective on recent releases. (See this, this.)

As for your question, you will need to shut off SIP — SIP is designed to block what you are doing — and then follow the steps you were trying to follow earlier. Whether that works?

Unless it's hidden in Profile Manager or in another MDM (the only bit I've located), I'm not aware of a supported way to lock out USB devices. Used to be that you could block USB device access with MCX, but MCX has been deprecated for a while, and Apple hasn't published the deletion sequence from Leopard for more recent releases.

Which is why I suggested physical port locks.

Reply

Answer 4

Dec 16, 2015 11:58 PM in response to MrHoffman

Yes I shut off SIP and remove the USBMass... file but I still can mount the USB

Could I install profile manager in IMAC and use it to block the USB

Reply

Answer 5

Dec 17, 2015 7:16 AM in response to darkcloud1222

Profile Manager and OS X Server and managing this and other Mac or iOS devices may be just what you need, or massive overkill.

Reinstall or restore the software, and re-enable SIP, as a starting point. Get back to a working configuration.

What are your more general application or requirements? I understand that you want to block the ports on your Mac. But is this a school or business or other environment were a server would be expected and useful, or where a server or MDM would be useful for Mac or iOS or other clients? Or is this a few home Mac systems, where something like Parental Controls might be useful? Or are physical port locks an option?

Reply