usbguard

usbguard copied to clipboard

I am trying to run usbguard 0.7.4 with the "-W" flag to enable the seccomp whitelist. But it caused a SIGSYS due to missing syscalls in the list. By the...

AnanasPfirsichSaft

Luks encrypted USB device hash changes when moved from one parent port to another

4

Ubuntu 17.10 usbguard 0.7.1-2 libgcrypt20 1.8.1-4 Usbguard has been configured from sources with: ``` ./configure --build=x86_64-pc-linux-gnu \ --enable-systemd \ --with-crypto-library=gcrypt \ --prefix=/usr --sysconfdir=/etc --localstatedir=/var ``` When I move a specific...

jean-christophe-manciot

Issue with localtime condition in rule

1

Currently, I am experimenting with usbguard and I have found that if I set rule for a USB device for e.g. if localtime(14:00-14:35), then particularly usb is worked if it...

simakhan785

Thunderbolt devices

3

Also interesting http://phoronix.com/scan.php?page=news_item&px=Thunderbolt-Security-Levels

zaolin

Usbguard doesn't apply to early boot stages

6

In early boot, i.e. before mounting the root filesystem, usbguard doesn't work. To fix this, it probably needs to be saved into initramfs and loaded pretty soon in the boot...

genodeftest

PGP (sub)key expired

1

The key used for signing release tarballs has two RSA subkeys; the one that was used for signing the latest release has expired on 07/05/2017. The PGP signature therefore does...

AHeinlein

Certain Hub not working as expected

4

I have written a few rules which should allow all USB mass storage, Hub and HID automatically. This works, except for one single hub which triggers an allow/block dialog. I...

AHeinlein

[RFE] When explicitly asked for using a rule, monitor the traffic to/from a USB device

4

Since it is usually hard to differentiate between a real keyboard and a faked one (no iSerial value exported, mobile users tend to use several keyboard and leave them at...

dkopecek

[RFE] Expand USBGuard to work with optical media

3

While this is most likely out of scope of this project, it would be really, really nice to expand USBGuard to work with optical media (CD/DVD/BluRay) devices as well. Not...

redhatrises

Duplicate interfaces in set

2

Hi, I am testing usbguard on my debian laptop at version 0.6.2+ds1-1. For my webcam I am getting the following rule generated: ``` allow id 064e:9700 serial "HF1019-T838-SN03-Rev0101" name "USB2.0...

cgzones