How to mod a ROM so that nobody can install app from adb, usb, etc?

Hi,
after I flash my STB with several education app, I don't want my child to install any app. So how to mod a ROM of STB to block installing app from adb, usb, market, etc.

thanks