Ideally, you should have a scanner or other USB device he is not accessible to ordinary users in your default configuration. (For this task, I use a Minolta DiMAGE Scan Elite 5400 film scanner and Fedora Core 5 as the example hardware and software.) This example assumes that your system uses the udev filesystem for handling device files, which is common with modern distributions.