Git-Mirrors/security-misc
1
0
Fork 0
mirror of https://github.com/Kicksecure/security-misc.git synced 2025-11-25 12:56:23 -05:00
Code Issues Projects Releases Packages Wiki Activity

Suppress usbguard startup unless a USB controller is visible to lspci

Browse source
This commit is contained in:
Aaron Rainbolt 2025-11-07 17:09:22 -06:00
parent 5b97e7bd27
commit fa32ba6c4f
No known key found for this signature in database
GPG key ID: A709160D73C79109
3 changed files with 13 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

1
debian/security-misc-shared.install vendored
View file

@ -55,6 +55,7 @@ usr/libexec/security-misc/disable-kernel-module-loading#security-misc-shared =>
usr/libexec/security-misc/hide-hardware-info#security-misc-shared => /usr/libexec/security-misc/hide-hardware-info
usr/libexec/security-misc/virusforget#security-misc-shared => /usr/libexec/security-misc/virusforget
usr/libexec/security-misc/pam_faillock_not_if_x#security-misc-shared => /usr/libexec/security-misc/pam_faillock_not_if_x
usr/libexec/security-misc/check-for-usb-controller#security-misc-shared => /usr/libexec/security-misc/check-for-usb-controller
usr/src/security-misc/emerg-shutdown.c#security-misc-shared => /usr/src/security-misc/emerg-shutdown.c
usr/bin/disabled-gps-by-security-misc#security-misc-shared => /usr/bin/disabled-gps-by-security-misc
usr/bin/disabled-netfilesys-by-security-misc#security-misc-shared => /usr/bin/disabled-netfilesys-by-security-misc

1
usr/lib/systemd/system/usbguard.service.d/30_security-misc.conf#security-misc-shared
View file

@ -3,3 +3,4 @@
[Unit]
ConditionPathExists=/sys/bus/usb
ExecCondition=/usr/libexec/security-misc/check-for-usb-controller

11
usr/libexec/security-misc/check-for-usb-controller#security-misc-shared Executable file
View file

@ -0,0 +1,11 @@
#!/bin/bash
## Copyright (C) 2025 - 2025 ENCRYPTED SUPPORT LLC <adrelanos@whonix.org>
## See the file COPYING for copying conditions.
export LC_ALL='C'
if lspci | grep -q '^[^ ]* USB controller: '; then
exit 0
fi
exit 1