If selinux can't udev certainly can (I remember having to add special rules to make VirtualBox talk to USB devices) :-)
I suppose you could run a script on login ... but have no idea how you might find out what USB devices were active during the login window....
And what about if I reboot with one of these hacked mice / marketing USB sticks connected ? Then it'd be active at login, could wait a few minutes and then start sending the 'bad' key sequences. So you'd actually have to ask X exactly what USB device was typed on ?
If selinux can't udev certainly can (I remember having to add special rules to make VirtualBox talk to USB devices) :-)
I suppose you could run a script on login ... but have no idea how you might find out what USB devices were active during the login window....
And what about if I reboot with one of these hacked mice / marketing USB sticks connected ? Then it'd be active at login, could wait a few minutes and then start sending the 'bad' key sequences. So you'd actually have to ask X exactly what USB device was typed on ?