Re: Allow only selected USB

[Toni Mas Soler <antomassol@protonmail.com>]

Alternatively, if you run udev, you can add new rule.
Fixed: /etc/udev/rules.d
Volatile: /run/udev/rules.d

I believe this example is autoexplained:
  8 # Do not use this rule if I'm not a USB
  9 SUBSYSTEM!="usb", GOTO="usbgend"
 10 # Only verify on plugin
 11 ACTION=="remove", GOTO="usbgend"
 12
 13 # Select what you want accept by one attributes
 22 SUBSYSTEM=="usb", ACTION=="add", ATTRS{manufacturer}=="PixArt", ATTRS{product}=="USB Optical Mouse", \
 23   ATTRS{idVendor}=="0AEa", ATTRS{idProduct}=="2EE0", ATTRS{bDeviceClass}=="00", ATTR{authorized}="1", GOTO="usbgend"
 24
 25 # Select what you want accept by other attributes
 30 ACTION=="add", SUBSYSTEM=="usb", ATTRS{idVendor}=="0124", ATTRS{idProduct}=="4312", ATTR{authorized}="1", GOTO="usbgend"
 31
 35 # Deactivate other USBs
 36 SUBSYSTEM=="usb", ACTION=="add", ATTR{authorized}="0"
 37
 38 LABEL="usbgend"

 Regards,

Toni Mas
GPG 3F42A21D84D7E950

Sent with ProtonMail Secure Email.

‐‐‐‐‐‐‐ Original Message ‐‐‐‐‐‐‐
En dimarts 9 de febrer de 2021 a les 23:31, Bhasker C V <bhasker@unixindia.com> va escriure:

> Fantastic ! thanks a ton ! thanks !  exactly what i was looking for
> 

> On Tue, Feb 9, 2021 at 7:43 PM <l0f4r0@tuta.io> wrote:
> 

> > Hi,
> > 

> > 9 févr. 2021, 19:44 de mailinglist@darac.org.uk:
> > 

> > > Certainly. > https://www.kernel.org/doc/html/latest/usb/authorization.html
> > >
> > + https://usbguard.github.io based on it.
> > 

> > Best regards,
> > l0f4r0

Attachment: signature.asc
Description: OpenPGP digital signature