Allow users in the sudo group to use usbguard-notifier

This commit is contained in:
Aaron Rainbolt 2025-09-12 18:08:00 -05:00
parent d262db2e6c
commit 90b6486ffe
No known key found for this signature in database
GPG key ID: A709160D73C79109
2 changed files with 11 additions and 6 deletions

View file

@ -92,12 +92,16 @@ case "$1" in
## Fix usbguard config permissions, this seemingly can't be done
## during the unpack stage
if test -f /etc/usbguard/rules.d/30_security-misc.conf; then
chmod 0600 /etc/usbguard/rules.d/30_security-misc.conf || true
fi
if test -f /etc/usbguard/usbguard-daemon.conf.security-misc; then
chmod 0600 /etc/usbguard/usbguard-daemon.conf.security-misc || true
fi
usbguard_config_file_list=(
'/etc/usbguard/rules.d/30_security-misc.conf'
'/etc/usbguard/usbguard-daemon.conf.security-misc'
'/etc/usbguard/IPCAccessControl.d/:sudo'
)
for usbguard_config_file in "${usbguard_config_file_list[@]}"; do
if test -f "${usbguard_config_file}"; then
chmod 0600 "${usbguard_config_file}"
fi
done
;;
abort-upgrade|abort-remove|abort-deconfigure)

View file

@ -0,0 +1 @@
Devices=listen