How to Restrict User Access to Removable Media With Administrative Rights

1. Become an administrator.

   For more information, see Using Your Assigned Administrative Rights in Securing Users and Processes in Oracle Solaris 11.2 .

2. Set up a role that includes the Device Management rights.

   For more information, see Chapter 3, Assigning Rights in Oracle Solaris, in Securing Users and Processes in Oracle Solaris 11.2 .

   # roleadd -m -d /export/home/muser -c "mediauser role" \
                   -A solaris.device.cdrw -P All muser

3. Add users who need to use the cdrw command to the newly created role.

   # usermod -R muser username