Blocking USB devices

[leochou0729]

Hello,
I'm a new MacOS developer. I need to create a client app, which can block mass storage devices. After googling, I found little information how to do that. The only way I found is to install Configuration Profiles to prevent external volumes mounting. I'm wondering if I can develop a kernel extension to accomplish that and what KPI(kauth, MAC, ...) I need to use. It is better I can block specific devices based on their pid/vid or something instead of all usb devices. Thanks a lot!

Leo