[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#880983: marked as done (ITP: usbauth -- USB Firewall including flex/bison parser)

Your message dated Thu, 22 Feb 2018 11:00:12 +0000
with message-id <E1eoobk-0000M5-KQ@fasolo.debian.org>
and subject line Bug#880983: fixed in usbauth-notifier 1.0~git20180119-1
has caused the Debian Bug report #880983,
regarding ITP: usbauth -- USB Firewall including flex/bison parser
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)


-- 
880983: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=880983
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems
--- Begin Message --- 
Package: wnpp
Severity: wishlist

This work was initially created for SUSE in 2015. Part of it was the USB interface authorization for the Linux kernel. It's contained in Linux since kernel version 4.4.
Please add the following packages libusbauth-configparser1, usbauth, usbauth-notifier to debian unstable.
The packages are already packaged for debian (see debian subfolder for each package).

GIT Repository: https://github.com/kochstefan/usbauth-all.git

This bug report replaces bug reports #879714, #879715, #879716


PACKAGE libusbauth-configparser1:
* Package name    : libusbauth-configparser1
  Version         : 1.0
  Upstream Author : Stefan Koch <stefan.koch10@gmail.com>
* URL             : https://github.com/kochstefan/usbauth-all/tree/master/libusbauth-configparser
* License         : LGPL-2.1
  Programming Lang: C
  Description     : Library for USB Firewall including flex/bison parser

The library is used to read the usbauth config file into data structures and is used by usbauth and YaST.
See also: openSUSE package request (https://build.opensuse.org/request/show/533512)


PACKAGE usbauth:
* Package name    : usbauth
  Version         : 1.0
  Upstream Author : Stefan Koch <stefan.koch10@gmail.com>
* URL             : https://github.com/kochstefan/usbauth-all/tree/master/usbauth
* License         : GPL-2.0
  Programming Lang: C
  Description     : USB firewall against BadUSB attacks

It is a firewall against BadUSB attacks. A config file descibes in which way USB interfaces would be accepted or denied.
To the kernel an interface authorization was developed with this firewall.
The firewall sets the authorization mask according to the rules.
See also: openSUSE package request (https://build.opensuse.org/request/show/533513)


PACKAGE usbauth-notifier:
* Package name    : usbauth-notifier
  Version         : 1.0
  Upstream Author : Stefan Koch <stefan.koch10@gmail.com>
* URL             : https://github.com/kochstefan/usbauth-all/tree/master/usbauth-notifier
* License         : GPL-2.0
  Programming Lang: C
  Description     : Notifier for USB Firewall to use with desktop environments

A notifier for the usbauth firewall against BadUSB attacks. The user could manually allow or deny USB devices.
Every user that wants use the notifier must be added to the usbauth group.
See also: openSUSE package request (https://build.opensuse.org/request/show/533514)



NOTICE aboud usbguard and usbauth:
The usbguard project provides an USB firewall, too. It is already packaged within debian.
The usbguard development was supported by RedHat and usbauth was 
supported by SUSE. Historical, usbguard was published while the working 
on usbauth has already been started.
The main difference is that usbguard works with USB devices and usbauth works with USB interfaces.

usbauth could allow/deny usb interfaces using the new usb interface 
authorization mechanism that is part of linux 4.4 and above.
See also: 
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git/log/?h=v4.4.94&qt=grep&q=interface+auth

Examples:
* allow a storage functionality of a USB device and deny USB Ethernet of 
the same device
* allow audio/video functionality of an USB TV card and deny using the 
remote control functionality
* allow USB printing/scanning and deny USB storage usage of a 
multifunction printer (BTW: the interface mechanism supports denying 
user space triggered actions (using USB claiming) like scanning)

usbguard could allow/deny USB devices using the usb device authorization 
mechanism of the Linux kernel.
It allows to denying a whole device if one interface of it is considered 
as bad (usbauth supports this, too)
usbguard allows creating actions that is not supported by usbauth.

If you can understand German language you could read 
a detailed description: 
https://epub.uni-bayreuth.de/3048/1/koch2017sicherheitsaspekte.pdf

--- End Message ---
--- Begin Message --- 
Source: usbauth-notifier
Source-Version: 1.0~git20180119-1

We believe that the bug you reported is fixed in the latest version of
usbauth-notifier, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 880983@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
SZ Lin (林上智) <szlin@debian.org> (supplier of updated usbauth-notifier package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 22 Feb 2018 16:27:53 +0800
Source: usbauth-notifier
Binary: usbauth-notifier
Architecture: source amd64
Version: 1.0~git20180119-1
Distribution: unstable
Urgency: medium
Maintainer: Stefan Koch <stefan.koch10@gmail.com>
Changed-By: SZ Lin (林上智) <szlin@debian.org>
Description:
 usbauth-notifier - Notifier for USB Firewall to use with desktop environments
Closes: 879716 880983
Changes:
 usbauth-notifier (1.0~git20180119-1) unstable; urgency=medium
 .
   * Import new upstream release (Closes: #879716, #880983)
   * Add d/manpages
   * Change postrm & preinst permission to 755
Checksums-Sha1:
 f9a0708de3d2b0ad4138a5c91e5d96f6988dc478 2140 usbauth-notifier_1.0~git20180119-1.dsc
 b6033aebf6f935840a329965676106ff2befa41a 15692 usbauth-notifier_1.0~git20180119.orig.tar.gz
 97ca6e2ae5a162c184cbb120cc8dec8fc994607b 3888 usbauth-notifier_1.0~git20180119-1.debian.tar.xz
 33e4e95dd40355960c3220091604cb072689206d 18284 usbauth-notifier-dbgsym_1.0~git20180119-1_amd64.deb
 3dd150584c50575ba122ee721ee190f23b646fe9 7678 usbauth-notifier_1.0~git20180119-1_amd64.buildinfo
 0df9489021e1a5fe7610c70eef4341f588e7f7e1 11536 usbauth-notifier_1.0~git20180119-1_amd64.deb
Checksums-Sha256:
 bea274a314a20c7e0af08d5e82eb054b240fe8bc57c2e90b0388a4eebb110eac 2140 usbauth-notifier_1.0~git20180119-1.dsc
 248e00ab9992a63322d7659b6048edcb1db066080fb9378077e29da67112dfc9 15692 usbauth-notifier_1.0~git20180119.orig.tar.gz
 e2d507f9c7ea10ed51e5e94b4d9391ee55af091f48758e33f60bb501684bb434 3888 usbauth-notifier_1.0~git20180119-1.debian.tar.xz
 fbb56f0d45fe2d1a0a57b84cf3e289dc740d5b029974c224b2d67eaed6dc8a39 18284 usbauth-notifier-dbgsym_1.0~git20180119-1_amd64.deb
 163c639f29a4cd8d15a780342d4b868607b2c30c658afcb914294adba6ad6e3d 7678 usbauth-notifier_1.0~git20180119-1_amd64.buildinfo
 44c71568d7271ece64c5b3a81c59c9c2fec551ee4b8f46ff39e5d321287d3b44 11536 usbauth-notifier_1.0~git20180119-1_amd64.deb
Files:
 108b67122e8016ca317567e6670da418 2140 utils optional usbauth-notifier_1.0~git20180119-1.dsc
 a539a6d07c8ff0d0867e06ab045db104 15692 utils optional usbauth-notifier_1.0~git20180119.orig.tar.gz
 b6a8bd6ee0e6ac93f537215e3e9308db 3888 utils optional usbauth-notifier_1.0~git20180119-1.debian.tar.xz
 14cac9fa25c992e0d52fbd48875b5292 18284 debug optional usbauth-notifier-dbgsym_1.0~git20180119-1_amd64.deb
 e84fe034641da3830530eb6e687d4759 7678 utils optional usbauth-notifier_1.0~git20180119-1_amd64.buildinfo
 0516733bf1e339844f923365c00f0209 11536 utils optional usbauth-notifier_1.0~git20180119-1_amd64.deb

-----BEGIN PGP SIGNATURE-----
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=rljF
-----END PGP SIGNATURE-----

--- End Message ---
Reply to: