usbguard
usbguard copied to clipboard
USBGuard
USBGuard is a software framework for implementing USB device authorization policies (what kind of USB devices are authorized) as well as method of use policies (how a USB device may interact with the...
Fixes #571 Allow rules in 'rules.conf' to start and end with spaces. It also allowed lines with only spaces. ```rules.conf $ cat -A rules.conf allow $ $ ``` I would...
If I add some temporary rules and then one permanent, all these rules will be written into the policy file. Steps to reproduce: ``` usbguard append-rule -t "allow id AACC:0011"...
# Summary (TL;DR) The fact that it is currently impossible to tell whether USBGuard took an action because a rule matched versus falling back to `ImplicitPolicyTarget` makes it impossible to...
As mentioned in DeviceBase.cpp in setConnectType(), _FDInputStream (stdio_filebuf) is responsible for closing the file descriptor returned by sysfs_device.openAttribute()._. This patch closes the fd.
Hi! Is there a chance for a new release off `master` e.g. for the Protobuf v30 fixes and support for Catch2 v3? A new release would help distros to not...
Hi, we're seeing the usbguard daemon running out of fds, and `/proc/pid/fd` shows that an extra fd is added every time I unplug and replug a keyboard: ``` lr-x------. 1...
With the old CapabilityBoundingSet the systemd service is not capable of loading (actually searching for) all permissions in the /etc/usbguard/rules.d folder. Adding CAP_DAC_READ_SEARCH allows the daemon running in a service...
Modified USBguard append-rule to add support to the beginning of the configuration file (-a 0 command) this cmd will failed： # usbguard append-rule -a 0 "allow 000e:1923" IPC ERROR: request...
Hey! When a device is not authorized, the `bMax` attribute in sysfs is empty. The device will draw only 100mA in this configuration. Authorizing the device puts 500mA (in case...
Currently, usbguard get-parameter or usbguard set-parameter outputs only ``` $ usbguard get-parameter Usage: usbguard get-parameter [OPTIONS] Options: -h, --help Show this help. ``` ``` $ usbguard set-parameter Usage: usbguard set-parameter...
