Depends. USB devices have "class"es which define their functions. Or you can allow per device via "manufacturer:model" identifiers. The controls can be very gr

Depends. USB devices have "class"es which define their functions. Or you can allow per device via "manufacturer:model" identifiers. The controls can be very granular, if you decide to manage that.