I am looking to create a udev rule that will block USB mass storage USB devices. The problem is that the device that I will be implementing the rule doesn’t have USB usb-storage.ko
built in the kernel. So any USB device plugged in presents its self as a Subsystem “USB” trying to think of a clever way to identify USB drives without creating rules for each major vendor ID.
Try working with known information, particlularly
SUBSYSTEMS=="usb"
ATTRS{idVendor}==""
ATTRS{manufacturer}==""
ATTRS{idProduct}==""
ATTRS{bDeviceClass}==""
ATTRS{product}==""
Using a combination of the above may help. I assume that they are all going to be devices from the same vendor so between that and at least the product, you should be able to get really close.