USBGUARD-DAEMON.C(5) USBGUARD-DAEMON.C(5) (NAME) usbguard-daemon.conf - USBGuard (DESCRIPTION) usbguard-daemon.conf USBGuard . . /etc/usbguard/usbguard-daemon.conf . -c usbguard-daemon(8) . (OPTIONS) RuleFile=path USBGuard IPC . : %sysconfdir%/usbguard/rules.conf RuleFolder=path USBGuard IPC . /etc/usbguard/rules.d/ . USBGuard . RuleFolder . RuleFile RuleFolder . : o RuleFile RuleFolder . o RuleFile RuleFolder . ImplicitPolicyTarget=target USB . allow block reject ( ) . : block PresentDevicePolicy=policy USB . allow block reject keep ( ) apply-policy ( ) . : apply-policy PresentControllerPolicy=policy USB . allow block reject keep apply-policy. : keep InsertedDevicePolicy=policy USB . block reject apply-policy. : apply-policy AuthorizedDefault=authorizedDefault USBGuard . . keep ( ) none ( ) all ( ) internal ( ) . : none RestoreControllerDeviceState=boolean USBGuard . . : false DeviceManagerBackend=backend . uevent () umockdev ( ) . UEvent netlink sysfs uevent USB . UMockDev umockdev-record . : uevent IPCAllowedUsers=username [username ...] IPC . : root IPCAllowedGroups=groupname [groupname ...] IPC . IPCAccessControlFiles=path IPC . IPC (IPC ACCESS CONTROL) . DeviceRulesWithPort=boolean <>. : false AuditBackend=backend (Audit) USBGuard. backend FileAudit LinuxAudit . : FileAudit AuditFilePath=filepath USBGuard. AuditBackend FileAudit . : %localstatedir%/log/usbguard/usbguard-audit.log HidePII=boolean (PII) ( ) . : false (SECURITY CONSIDERATIONS) IPC IPC USBGuard . . IPCAllowedUsers IPCAllowedGroups IPCAccessControlFiles IPC . (ACL) IPC USB USBGuard . RestoreControllerDeviceState (RestoreControllerDeviceState configuration option) true USB ( USB) ( ) . IPC (IPC ACCESS CONTROL) IPC USBGuard . IPC (Sections) (Privileges) . : IPCAccessControlFiles (Recommended: IPCAccessControlFiles) IPCAccessControlFiles IPC . : 1. (basename) UID GID . : ( ) ( GID ) . ( UID ) . 2. Section=[privilege1][,privilege2] ... . . : o Devices o modify: ( ). o list: . o listen: . o Policy o modify: . o list: . o Exceptions o listen: (Exceptions). o Parameters o modify: . o list: . o listen: . . USB (Devices=modify) USB (Devices=list) USB (Devices=listen) USB (Policy=list) (Exceptions=listen) : Devices=modify,list,listen Policy=list Exceptions=listen IPC usbguard add-user usbguard remove-user . usbguard(1) . IPC 0600 . : IPCAllowedUsers IPCAllowedGroups (Legacy: IPCAllowedUsers and IPCAllowedGroups) IPC root joe wheel : IPCAllowedUsers=root joe IPCAllowedGroups=wheel (SEE ALSO) usbguard-daemon(8), usbguard-rules.conf(5) (BUGS) https://github.com/USBGuard/usbguard/issues/new . (AUTHOR) USBGuard Daniel Kopecek . . (RESOURCES) : https://usbguard.github.io (COPYING) GPLv2+: GPL http://gnu.org/licenses/gpl.html. : . . 09/05/2026 USBGUARD-DAEMON.C(5)