diff --git a/board/common/rootfs/etc/modprobe.d/usbcore.conf b/board/common/rootfs/etc/modprobe.d/usbcore.conf
new file mode 100644
index 00000000..c2100e52
--- /dev/null
+++ b/board/common/rootfs/etc/modprobe.d/usbcore.conf
@@ -0,0 +1,3 @@
+# Do not authorize usb ports before they have been checked in in the device-tree
+options usbcore authorized_default=0
+