Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feature request: a rule property that makes the rule match only on daemon startup #564

Open
calestyo opened this issue Nov 1, 2022 · 0 comments

Comments

@calestyo
Copy link

calestyo commented Nov 1, 2022

Hey.

I know there is usbguard-daemon.conf’s keep value for options like PresentDevicePolicy, but this just generally keeps every device (respectively host controller) present when the daemon starts.

What I would like being able to do is using apply-policy in those options and requiring specific rules for such devices to be added to rules.conf but still have a way to have them only match when the daemon starts.

The idea is that this would allow to harden things a bit more, should any future (other) device that is attached after the daemon has started match those rules, which are only intended for when the daemon starts.

Thanks,
Chris.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant