Clarify policy 'keep'

[murinicanor]

Hi,

could you clarify a bit what "just sync the internal state and leave it" means? I don't know what 'internal state' means and i thought i'm maybe not the only one ;)

[ZoltanFridrich]

PresentDevicePolicy keep means: when a USB device is scanned, then the daemon will not try to apply the policy to it but instead USBGuard will remember this device 'as is', so the device will have the same authorization target that it had before the USBGuard was started. This is what "just sync the internal state and leave it" means. Internal state, in this case, is simply a list of devices known by USBGuard.