You are not logged in.
I want to achieve that when a new device is plugged in a prompt will ask the user whether to allow the device or not
I followed the USBGuard page in ArchWIki, but it seems like usb-protection = true and usb-protection-level = always will result in USBGuard blocking all devices, and usb-protection-level = lockscreen will result in USBGuard allowing all devices as the device is unlocked, usb-protection = false simply disabled USBGuard even when its service is running
I tried to install usbguard-notifier and usbguard-applet-qt, but none of them worked, I also tried usbguard-gnome(not in AUR, built from GitHub) but it cannot actually modify usbguard's rules
I have make sure that I have the permission to IPC in usbguard-daemon.conf, and usbguard-dbus is enabled.
Previously I've successfully setup USBGuard with popup for new devices, but I just can't replicate that setup
Anyone has any idea?
I use Arch on LVM on LUKS with SELinux and Secure Boot btw
Offline
Also is it possible to request for user password when allowing a new device via pop up, I failed to achieve that even in the previous setup
I use Arch on LVM on LUKS with SELinux and Secure Boot btw
Offline
Ok this is weird
I did a completely resetup with
╰─ gsettings get org.gnome.desktop.privacy usb-protection-level
'always'
╭─ ~ ─────────────────────────────────────────────────── ✔ 17:37:53
╰─ gsettings get org.gnome.desktop.privacy usb-protection
true
And it seems like the prompt is working again
Still haven't figured out how to make USBGuard popup asking for user auth tho
I use Arch on LVM on LUKS with SELinux and Secure Boot btw
Offline
No... it stop functioning after reboot...
I use Arch on LVM on LUKS with SELinux and Secure Boot btw
Offline
Yep, retested, the pop up will be able to show correctly when first installed, but it no longer functions after a reboot
I use Arch on LVM on LUKS with SELinux and Secure Boot btw
Offline
OK, after several retesting I now fully understand this issue
The USBGuard page in ArchWiki need a lot of update, I'll do them tomorrow as it is 2:21 am for me now
I still haven't figured out a way to require user to authenticate(input password, and in my setup, fingerprint 2fa) for allowing / denying devices, so this is still an open thread
I use Arch on LVM on LUKS with SELinux and Secure Boot btw
Offline