{"id":508698,"date":"2025-08-13T05:35:41","date_gmt":"2025-08-13T05:35:41","guid":{"rendered":"https:\/\/www.ninjaone.com\/?post_type=script_hub&p=508698"},"modified":"2025-08-13T05:35:41","modified_gmt":"2025-08-13T05:35:41","slug":"verifier-letat-du-stockage-usb-dans-linux-avec-un-script-shell","status":"publish","type":"script_hub","link":"https:\/\/www.ninjaone.com\/fr\/script-hub\/verifier-letat-du-stockage-usb-dans-linux-avec-un-script-shell\/","title":{"rendered":"Comment v\u00e9rifier l’\u00e9tat du stockage USB dans Linux avec un script Shell"},"content":{"rendered":"

Les p\u00e9riph\u00e9riques de stockage amovibles tels que les cl\u00e9s USB sont des outils indispensables pour le transfert de donn\u00e9es, les sauvegardes et la r\u00e9cup\u00e9ration du syst\u00e8me. Cependant, ils repr\u00e9sentent \u00e9galement un risque s\u00e9rieux pour la s\u00e9curit\u00e9 s’ils ne sont pas g\u00e9r\u00e9s, en particulier dans les environnements d’entreprise ou de MSP. Savoir si l’acc\u00e8s au stockage USB est activ\u00e9 sur vos syst\u00e8mes Linux n’est pas seulement une question de commodit\u00e9 : c’est une question d’application de politique, de conformit\u00e9 \u00e0 la s\u00e9curit\u00e9 et de sensibilisation op\u00e9rationnelle. Cet article pr\u00e9sente un script shell qui automatise le processus pour v\u00e9rifier l’\u00e9tat du stockage USB dans Linux avec un script shell et qui s’int\u00e8gre \u00e9ventuellement \u00e0 NinjaOne pour rapporter les r\u00e9sultats.<\/p>\n

Contexte<\/h2>\n

Sous Linux, le contr\u00f4le de l’acc\u00e8s au stockage USB est principalement assur\u00e9 par des modules du noyau, en particulier les pilotes usb_storage<\/strong> et uas<\/strong> (USB Attached SCSI). Les administrateurs syst\u00e8me peuvent d\u00e9sactiver ces pilotes en les pla\u00e7ant sur une liste noire ou en les configurant pour qu’ils ex\u00e9cutent des commandes inoffensives au lieu de se charger.<\/p>\n

Le script pr\u00e9sent\u00e9 ici est con\u00e7u pour inspecter le r\u00e9pertoire \/etc\/modprobe.d<\/strong>, o\u00f9 se trouvent g\u00e9n\u00e9ralement ces r\u00e8gles de chargement de modules. C’est particuli\u00e8rement important dans les environnements g\u00e9r\u00e9s par NinjaOne, o\u00f9 une supervision centralis\u00e9e et des contr\u00f4les de conformit\u00e9 automatis\u00e9s sont essentiels. Les fournisseurs de services g\u00e9r\u00e9s (MSP)<\/a> et les \u00e9quipes informatiques internes b\u00e9n\u00e9ficient de ce type d’outils pour s’assurer que les terminaux sont conformes aux politiques de l’entreprise.<\/p>\n

Le script\u00a0:<\/h2>\n
#!\/usr\/bin\/env bash\r\n\r\n# Description: Checks if the linux machine currently allows access to USB storage devices and optionally saves the results to a custom field.\r\n# By using this script, you indicate your acceptance of the following legal terms as well as our Terms of Use at https:\/\/www.ninjaone.com\/terms-of-use.\r\n# Ownership Rights: NinjaOne owns and will continue to own all right, title, and interest in and to the script (including the copyright). NinjaOne is giving you a limited license to use the script in accordance with these legal terms. \r\n# Use Limitation: You may only use the script for your legitimate personal or internal business purposes, and you may not share the script with another party. \r\n# Republication Prohibition: Under no circumstances are you permitted to re-publish the script in any script library or website belonging to or under the control of any other software provider. \r\n# Warranty Disclaimer: The script is provided \u201cas is\u201d and \u201cas available\u201d, without warranty of any kind. NinjaOne makes no promise or guarantee that the script will be free from defects or that it will meet your specific needs or expectations. \r\n# Assumption of Risk: Your use of the script is at your own risk. You acknowledge that there are certain inherent risks in using the script, and you understand and assume each of those risks. \r\n# Waiver and Release: You will not hold NinjaOne responsible for any adverse or unintended consequences resulting from your use of the script, and you waive any legal or equitable rights or remedies you may have against NinjaOne relating to your use of the script. \r\n# EULA: If you are a NinjaOne customer, your use of the script is subject to the End User License Agreement applicable to you (EULA).\r\n#\r\n#   The script checks the modprobe.d folder for any files that may block the USB storage driver or the USB Attached SCSI driver.\r\n#   There are two methods of loading USB storage drivers that allow mounting of USB storage devices:\r\n#       1. Implicit loading: The USB storage driver is loaded automatically when a USB storage device is connected.\r\n#       2. Explicit loading: The USB storage driver is loaded manually by a user, program, or script.\r\n#\r\n# Release Notes: Initial Release\r\n#\r\n# Preset Parameter: -CustomField \"usbStorageStatus\"\r\n#   The custom field to save the USB storage status to.\r\n#\r\n# Preset Parameter: --help\r\n#   Displays the help menu.\r\n#\r\n\r\n# Functions\r\n# Print an error message and exit with a specific status code\r\ndie() {\r\n    local _ret=\"${2:-1}\"\r\n    test \"${_PRINT_HELP:-no}\" = yes && print_help >&2\r\n    echo \"$1\" >&2\r\n    exit \"${_ret}\"\r\n}\r\n\r\nprint_help() {\r\n    printf '\\n\\n%s\\n\\n' 'Usage: [-CustomField \"custom_field_name\"]'\r\n    printf '  %s\\n' '-CustomField'\r\n    printf '    The custom field to save the USB storage status to.\\n'\r\n}\r\n\r\n# Parse the command-line arguments\r\nparse_commandline() {\r\n    while test $# -gt 0; do\r\n        _key=\"$1\"\r\n        case \"$_key\" in\r\n        -CustomField | --CustomField | -customfield | --customfield | -cf | --cf)\r\n            _arg_customfield=\"CustomField\"\r\n            ;;\r\n        --help | -help | -h | --h)\r\n            _PRINT_HELP=yes die \"\" 0\r\n            ;;\r\n        *)\r\n            _PRINT_HELP=yes die \"[Error] Got an unexpected argument '$1'\" 1\r\n            ;;\r\n        esac\r\n        shift\r\n    done\r\n}\r\n\r\nfunction SetCustomField() {\r\n    if [[ -z \"$1\" ]] || [[ -z \"$2\" ]]; then\r\n        echo \"[Error] Missing required arguments.\"\r\n        return 1\r\n    fi\r\n    local customfieldName=$1\r\n    local customfieldValue=$2\r\n    if [ -f \"${NINJA_DATA_PATH}\/ninjarmm-cli\" ]; then\r\n        if [ -x \"${NINJA_DATA_PATH}\/ninjarmm-cli\" ]; then\r\n            if \"$NINJA_DATA_PATH\"\/ninjarmm-cli get \"$customfieldName\" >\/dev\/null; then\r\n                # check if the value is greater than 10000 characters\r\n                if [ ${#customfieldValue} -gt 10000 ]; then\r\n                    echo \"[Warn] Custom field value is greater than 10000 characters\" >&2\r\n                    return 1\r\n                fi\r\n                if ! echo \"${customfieldValue::10000}\" | \"$NINJA_DATA_PATH\"\/ninjarmm-cli set --stdin \"$customfieldName\"; then\r\n                    echo \"[Warn] Failed to set custom field\" >&2\r\n                    return 1\r\n                else\r\n                    echo \"[Info] Custom field value set successfully\"\r\n                fi\r\n            else\r\n                echo \"[Warn] Custom Field ($customfieldName) does not exist or agent does not have permission to access it\" >&2\r\n                return 1\r\n            fi\r\n        else\r\n            echo \"[Warn] ninjarmm-cli is not executable\" >&2\r\n            return 1\r\n        fi\r\n    else\r\n        echo \"[Warn] ninjarmm-cli does not exist\" >&2\r\n        return 1\r\n    fi\r\n}\r\n\r\nparse_commandline \"$@\"\r\n\r\n# If script form variables are used, replace the command line parameters with their value.\r\nif [[ -n \"${customField}\" ]]; then\r\n    _arg_customfield=\"${customField}\"\r\nfi\r\n\r\n# Variables\r\n# Modprobe.d folder\r\nmodprobFolder=\"\/etc\/modprobe.d\"\r\n\r\n# Check if we have read access to the modprobe.d folder\r\nif ! [ -r \"${modprobFolder}\" ]; then\r\n    if [[ -n \"${_arg_customfield}\" ]]; then\r\n        SetCustomField \"${_arg_customfield}\" \"Unable to Determine\"\r\n    fi\r\n    die \"[Error] User ${USER} has no read access to modprobe.d folder\" 1\r\nfi\r\n\r\n# Check if modprobe.d folder does not exist\r\nif ! [ -d \"${modprobFolder}\" ]; then\r\n    if [[ -n \"${_arg_customfield}\" ]]; then\r\n        SetCustomField \"${_arg_customfield}\" \"Unable to Determine\"\r\n    fi\r\n    die \"[Error] Modprobe folder does not exist\" 1\r\nfi\r\n\r\n# Set default values\r\nUsbStorage=\"Enabled\"\r\nusb_storage_status=\"Enabled\"\r\nuas_status=\"Enabled\"\r\nusb_storage_driver_status=\"Enabled\"\r\nuas_driver_status=\"Enabled\"\r\n\r\n# Check if usb_storage or uas is blocked in other files\r\nfor file in \"${modprobFolder}\"\/*; do\r\n\r\n    if ! [ -r \"${file}\" ]; then\r\n        echo \"[Warn] User ${USER} has no read access to ${file}\"\r\n    fi\r\n\r\n    # Check if implicit loading is blocked\r\n    if grep -q \"blacklist usb_storage\" \"${file}\"; then\r\n        echo \"[Info] USB storage driver is blocked in ${file}\"\r\n        usb_storage_status=\"Disabled\"\r\n    fi\r\n    # Check if implicit loading is blocked\r\n    if grep -q \"blacklist uas\" \"${file}\"; then\r\n        echo \"[Info] USB Attached SCSI driver is blocked in ${file}\"\r\n        uas_status=\"Disabled\"\r\n    fi\r\n\r\n    # Check if explicit loading is blocked\r\n    if grep -q \"install usb-storage \/bin\/true\" \"${file}\"; then\r\n        echo \"[Info] USB storage driver is blocked in ${file}\"\r\n        usb_storage_driver_status=\"Disabled\"\r\n    fi\r\n    # Check if explicit loading is blocked\r\n    if grep -q \"install uas \/bin\/true\" \"${file}\"; then\r\n        echo \"[Info] USB Attached SCSI driver is blocked in ${file}\"\r\n        uas_driver_status=\"Disabled\"\r\n    fi\r\ndone\r\n\r\n# Output the status of implicit loading\r\nif [ \"${usb_storage_status}\" == \"Disabled\" ] && [ \"${uas_status}\" == \"Disabled\" ]; then\r\n    echo \"[Info] USB storage driver implicit loading: Blocked\"\r\nelif [ \"${usb_storage_status}\" == \"Enabled\" ] && [ \"${uas_status}\" == \"Enabled\" ]; then\r\n    echo \"[Info] USB storage driver implicit loading: Allowed\"\r\nelse\r\n    echo \"[Info] USB storage driver implicit loading: Partially Allowed\"\r\nfi\r\n\r\n# Output the status of explicit loading\r\nif [ \"${usb_storage_driver_status}\" == \"Disabled\" ] && [ \"${uas_driver_status}\" == \"Disabled\" ]; then\r\n    echo \"[Info] USB storage driver manual loading: Blocked\"\r\nelif [ \"${usb_storage_driver_status}\" == \"Enabled\" ] && [ \"${uas_driver_status}\" == \"Enabled\" ]; then\r\n    echo \"[Info] USB storage driver manual loading: Allowed\"\r\nelse\r\n    echo \"[Info] USB storage driver manual loading: Partially Allowed\"\r\nfi\r\n\r\n# Determine the overall status of USB storage\r\nif [ \"${usb_storage_status}\" == \"Disabled\" ] && [ \"${uas_status}\" == \"Disabled\" ] && [ \"${usb_storage_driver_status}\" == \"Disabled\" ] && [ \"${uas_driver_status}\" == \"Disabled\" ]; then\r\n    UsbStorage=\"Disabled\"\r\nelif [ \"${usb_storage_status}\" == \"Enabled\" ] && [ \"${uas_status}\" == \"Enabled\" ] && [ \"${usb_storage_driver_status}\" == \"Enabled\" ] && [ \"${uas_driver_status}\" == \"Enabled\" ]; then\r\n    UsbStorage=\"Enabled\"\r\nelif [ \"${usb_storage_status}\" == \"Enabled\" ] || [ \"${uas_status}\" == \"Enabled\" ] || [ \"${usb_storage_driver_status}\" == \"Enabled\" ] || [ \"${uas_driver_status}\" == \"Enabled\" ]; then\r\n    UsbStorage=\"Partially Allowed\"\r\nelse\r\n    UsbStorage=\"Unable to Determine\"\r\nfi\r\n\r\necho \"[Info] USB storage is ${UsbStorage}\"\r\n\r\nif [[ -n \"${_arg_customfield}\" ]]; then\r\n    SetCustomField \"${_arg_customfield}\" \"${UsbStorage}\"\r\nfi<\/pre>\n
 <\/p>\n\n
Description d\u00e9taill\u00e9e<\/h2>\n
Ce script shell ex\u00e9cute plusieurs t\u00e2ches de mani\u00e8re structur\u00e9e et tol\u00e9rante aux pannes. Voici une description \u00e9tape par \u00e9tape\u00a0:<\/p>\n
    \n
  1. \n
    Analyse des<\/strong> arguments de la ligne de commande<\/h3>\n