We have a industrial system(running on linux) with a USB port. We have the USB port only for copying certain data. Other than this we don't want the USB drive to contain any other executables or scripts.etc. As they may copy a worm/virus on to a USB device and attach the system. What are the ways to avoid this ?
Update: If its mounted with noexec option the user can't execute as you guys suggested. But to remount and change to exec, How will the user gain root permissions?