USBGuard

From ArchWiki
Revision as of 10:16, 12 August 2016 by Fordprefect (talk | contribs) (further explanations)
Jump to navigation Jump to search

This software allows one to implement a white/black-listing mechanism for usb-devices. Inspiration for this is drawn from exploits like BadUSB. It consists of

Installation

Install usbguardAUR or usbguard-gitAUR.

Configuration

The main configuration file is found in /etc/usbguard/usbguard-deamon.conf.

Start the deamon usbguard.service.

Usage

USBGuard has a core deamon, a CLI, a QT GUI, a DBUS interface and an API via libusbguard.

Rules

To configure usbguard to your needs, you can edit /etc/usbguard/rules.conf. The rules syntax is formally explained here. An example for a hp printer connected via USB can look like this: allow id 03f0:0c17 serial "00CNFD234631" name "hp LaserJet 2020" hash "a0ef07fceb6fb77698f79a44a450121m" parent-hash "69d19c1a5733a31e7e6d9530e6k434a6" with-interface { 07:01:03 07:01:02 07:01:01 }

Weblinks