After installing USBGuard, you

[rakhirhif8963]

USBGuard is not pre-installed in popular distributions, but this problem can be easily circumvented by using the program's source code. Owners of the Red Hat family of Linux distributions can connect the Extra Packages for Enterprise Linux (EPEL) repository to deploy USBGuard; with the release of Ubuntu 16.10, the option for quick installation of this software is also available in the Universe repository, but it is supported by the community, not the distribution developer.

will need to configure the configuration file usbguard-daemon.conf. After connecting to the OS, the program scans USB devices or hubs connected to the system and consistently applies the specified network protection settings. Based on the results of the scan, it can allow (activate) the drive, prohibit (deactivate) it, or block (turn off). The parameter "usb-device-id" allows you to enable all approved USB devices or, if USBGuard detects an attempt to connect to the port of an unauthorized device, block it. Another important feature of the program is that it can disable empty ports (you need to configure the parameter "port-id").

To manage USBGuard, you can use a command shell (it is south africa whatsapp data to run scripts consisting of a list of commands and helps simplify the configuration of allowed connections) and a template generator, which allows you to fine-tune the original OS policies. Kroah-Hartmann explains how to configure the connection policy. To do this, you need to execute a sequence of commands:

# usbguard generate-policy > rules.conf

# vi rules.conf (review/modify the rule set)

# sudo install -m 0600 -o root -g root rules.conf /etc/usbguard/rules.conf

# sudo systemctl restart usbguard

Next, we specify the specific settings. For example: allow 1050:0011 name "Linux user" serial "0001234567" via-port "1-2" hash "044b5e168d40ee0245478416caf3d998" reject via-port "1-2"

As you can see from the example, the program allows you to configure connection policies for each USB drive, binding it to a specific port. Such a binding means that when connected to other ports, the device will be blocked.