Arch Linux

physkets

Member

From: India

Registered: 2016-08-22

Posts: 46

[Solved] USBGuard Gnome integration not functioning.

I am trying to set-up USBGuard, and seem to mostly have it working.
I followed the instructions on the wiki, and after "allowing" my keyboard/mouse and the Bluetooth controller, both of them are working fine (and they don't when blocked or not explicitly allowed - so the mechanism seems to be functioning).
But, I am using Gnome, and also followed the relevant instructions for it on the wiki: https://wiki.archlinux.org/title/USBGua … ntegration
It is supposed to configure it such that while the desktop is unlocked, any USB device is allowed, while they are blocked when the screenlock is on.

Along with the polkit rule file in the wiki, I have the following set:

$ run0 grep wheel /etc/usbguard/usbguard-daemon.conf 
IPCAllowedGroups=wheel
$ gsettings get org.gnome.desktop.privacy usb-protection 
true
$ gsettings get org.gnome.desktop.privacy usb-protection-level 
'lockscreen'

And yet, USB drives that I plug-in while I am logged-in are still blocked.
Anyone have any experience with this, or have any guesses as to what might be wrong?

Last edited by physkets (2026-05-26 06:27:14)

physkets

Member

From: India

Registered: 2016-08-22

Posts: 46

Re: [Solved] USBGuard Gnome integration not functioning.

Actually, after a reboot, it does work.
When I plug-in a USB drive while unlocked, it is auto-mounted.
When I do so when the screen is locked, the system generates a notification of the event and suggests re-plugging the device to be able to access it.
There is also a usbguard rule:

$ usbguard list-rules
.
.
9: allow id *:* label "GNOME_SETTINGS_DAEMON_RULE"