usbguard-daemon - USBGuard daemon
Contents
Bugs
If you find a bug in this software or if you’d like to request a feature to be implemented, please file a
ticket at https://github.com/USBGuard/usbguard/issues/new.
Copying
License GPLv2+: GNU GPL version 2 or later http://gnu.org/licenses/gpl.html. This is free software: you
are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law.
01/15/2025 USBGUARD-DAEMON(8)
Description
The usbguard-daemon is the main component of the USBGuard software framework. It runs as a service in the
background and enforces the USB device authorization policy for all USB devices. The policy is defined by
a set of rules using a rule language described in usbguard-rules.conf(5). The policy and the
authorization state of USB devices can be modified during runtime using the usbguard(1) tool.
Name
usbguard-daemon - USBGuard daemon
Options
-d
Enable debugging messages in the log.
-f
Enable classical daemon behavior (fork at start, sysV compliant).
-s
Log to syslog.
-k
Log to console. (default)
-K
Disable Logging to console.
-lpath
Log to a file at path.
-ppath
Write PID to a file at path (default: /var/run/usbguard.pid).
-cpath
Load configuration from a file at path (default: /etc/usbguard/usbguard-daemon.conf).
-P
Disable permissions check on conf and policy files (default: /etc/usbguard/usbguard-daemon.conf).
-C
Drop capabilities to limit privileges of the process.
-W
Use a seccomp allowlist to limit available syscalls to the process.
-h
Show the help/usage screen.
Resources
Main web site: https://usbguard.github.io/
Security Considerations
The daemon provides the USBGuard public IPC interface. Depending on your distribution defaults, the
access to this interface is limited to a certain group or a specific user only. Please refer to the
usbguard-daemon.conf(5) man page for more information on how to configure the ACL correctly. DonotleavetheACLunconfiguredasthatwillexposetheIPCinterfacetoalllocalusers.ThatwillallowthemtomanipulatetheauthorizationstateofUSBdevicesandmodifytheUSBGuardpolicy.
See Also
usbguard-daemon.conf(5), usbguard-rules.conf(5), usbguard(1)
Synopsis
usbguard-daemon [OPTIONS]
