On 4/17/14, 5:11 AM, Trevor Vaughan wrote:
Just out of curiosity, is adding nousb to the grub command line actually feasible for enforcement?

Virtual machines.

I can't remember the last time I used a system where I didn't need a USB keyboard at some point (can you even buy server class systems with PS/2 support any more?)

Complete agreement, and acknowledgement in the rule's description:
WARNING: Disabling all kernel support for USB will cause problems for systems with USB-based keyboards, mice, or printers. This configuration is infeasible for systems which require USB devices, which is common.

Patches welcome which clarify/balance physical deployments vs VMs.