This commit is contained in:
Patrick Schleizer 2025-11-02 06:00:24 -05:00
parent 29685938bd
commit 5121f80f28
No known key found for this signature in database
GPG key ID: CB8D50BB77BB3C48

View file

@ -1,6 +1,11 @@
## We allow devices that were plugged in before the daemon starts. Everything
## is blocked as the default. Following rules apply on top of this.
## First match wins. Therefore, reject rules should be on the top.
## Quote:
## https://usbguard.github.io/documentation/rule-language
## > the daemon scans the existing rules sequentially
## Explicitly reject any interface that is not documented and/or defined by
## USB.org.
## Note: Most probably superfluous.