What's new in USBGuard 1.0?
summary
USBGuard 1.0 adds concrete, usable features: a rules.d directory lets the daemon load numbered rule files in alphanumeric order for modular policies; a config hide-id option suppresses serial/hash data from audit logs; the CLI can emit a rule for a single device (usbguard generate-policy with a device descriptor path) and create temporary rules (usbguard append-rule -t) that disappear on restart. Device management accepts rule-strings and partial rules to block many devices at once. Doxygen API docs and a notifier (daemon + CLI) ship, notifier UI button is still in development.
AI-written summary · about
chapters (11)
- 0:00Introduction
- 4:58Key enhancements
- 5:19Policy with rules.d
- 8:28Audit log device details
- 9:31Generate device rules online
- 10:55Temporary rules for testing
- 12:24Device management strings
- 14:15Partial rules for attributes
- 15:42Documentation improvements
- 16:45USBGuard Notifier
- 18:09Q&A
related talks
27mUSBGuard
33mMaking USB Great Again with USBFILTER
40mA Tour of USB Device Controller (UDC) in Linux
52mDebugging Usually Slightly Broken (USB) Devices and Drivers
36mUSB Arsenal for Masses
40mUSB on Embedded Linux Systems Deep Dive
18mμUSB: Practical and Safe USB Driver Reuse for Arm TrustZone
47mTrojanizing Hardware: Be Careful What (USB) You Plug In and Where