You can do something like this with grsecurity. It's not a whitelist but you can deny any new usb devices after you toggle a switch: If you say Y here, a n

You can do something like this with grsecurity. It's not a whitelist but you can deny any new usb devices after you toggle a switch: If you say Y here, a new sysctl option with name "deny_new_usb" will be created. Setting its value to 1 will prevent any new USB devices from being recognized by the OS. Any attempted USB device insertion will be logged. This option is intended to be used against custom USB devices designed to exploit vulnerabilities in various USB device drivers.