> If you plug something into a centOS machine it’s not going to be able to do anything until you mount it ... You may want to double check your CentOS desktop'

> If you plug something into a centOS machine it’s not going to be able to do anything until you mount it ... You may want to double check your CentOS desktop's defaults (you might be surprised). My most critical machines have a file named /etc/modprobe.d/disabled.conf with entries such as these for dozens of filesystems, network protocols, and such: install usb-storage /bin/false install vfat /bin/false When absolutely required, they can quickly be temporarily commented out (but not by mistake) and there's some very extensive auditing rules that keep an eye on things at that point. It's really not that hard to lock a machine down and yet still have it actually remain usable. With the exceptions of the few security-focused distributions (Qubes OS, Tails, etc.), I can't think of any Linux distribution / desktop environment that even comes remotely close to doing anything like that (OOTB) by default, though.