How can I truly disable USB/removable drive support purely with software?
On Windows for example I know I could disable the relevant hardware in device manager, and users would not be able to override this. This would work for the most part.
What about a scenario where there is a local privilege exploit which allows the user to then enable USB ports?
Is there any way to disable USB ports or removable drivers at a lower OS level, or to raise an alert if one is inserted?