logo
Free, unlimited AI code reviews that run on commit
git-lrc git-lrc GitHub Install Now We'd appreciate a star git-lrc - Free, unlimited AI code reviews that run on commit | Product Hunt git-lrc - Free, unlimited AI code reviews that run on commit | Product Hunt

usbguard-daemon - USBGuard daemon

Author

       USBGuard was originally written by Daniel Kopeček. Many people have contributed to it.

Bugs

       If you find a bug in this software or if you’d like to request a feature to be implemented, please file a
       ticket at https://github.com/USBGuard/usbguard/issues/new.

Copying

       License GPLv2+: GNU GPL version 2 or later http://gnu.org/licenses/gpl.html. This is free software: you
       are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law.

                                                   01/15/2025                                 USBGUARD-DAEMON(8)

Description

       The usbguard-daemon is the main component of the USBGuard software framework. It runs as a service in the
       background and enforces the USB device authorization policy for all USB devices. The policy is defined by
       a set of rules using a rule language described in usbguard-rules.conf(5). The policy and the
       authorization state of USB devices can be modified during runtime using the usbguard(1) tool.

Name

       usbguard-daemon - USBGuard daemon

Options

-d
           Enable debugging messages in the log.

       -f
           Enable classical daemon behavior (fork at start, sysV compliant).

       -s
           Log to syslog.

       -k
           Log to console. (default)

       -K
           Disable Logging to console.

       -lpath
           Log to a file at path.

       -ppath
           Write PID to a file at path (default: /var/run/usbguard.pid).

       -cpath
           Load configuration from a file at path (default: /etc/usbguard/usbguard-daemon.conf).

       -P
           Disable permissions check on conf and policy files (default: /etc/usbguard/usbguard-daemon.conf).

       -C
           Drop capabilities to limit privileges of the process.

       -W
           Use a seccomp allowlist to limit available syscalls to the process.

       -h
           Show the help/usage screen.

Resources

       Main web site: https://usbguard.github.io/

Security Considerations

       The daemon provides the USBGuard public IPC interface. Depending on your distribution defaults, the
       access to this interface is limited to a certain group or a specific user only. Please refer to the
       usbguard-daemon.conf(5) man page for more information on how to configure the ACL correctly. DonotleavetheACLunconfiguredasthatwillexposetheIPCinterfacetoalllocalusers.ThatwillallowthemtomanipulatetheauthorizationstateofUSBdevicesandmodifytheUSBGuardpolicy.

See Also

usbguard-daemon.conf(5), usbguard-rules.conf(5), usbguard(1)

Synopsis

       usbguard-daemon [OPTIONS]

See Also