src/ThirdParty and src/Library/RuleParser/quex contain embedded code copies. Please ask upstream to remove them from their VCS and tarballs and depend on them instead. You can then package them separately. Alternatively, package them separately and remove all of them at `debian/rules build` time before dh_auto_configure and at `debian/rules clean` time (or just have uscan auto-repack the upstream tarball using Files-Excluded).
They're there to allow building usbguard on systems without those libraries packaged: https://dkopecek.github.io/usbguard/blog/2015/USBGuard-on-Ubuntu-14-04 Upstream already agree they shouldn't be used if system packages are available: see https://apps.fedoraproject.org/packages/usbguard/sources/spec lines 55-65
This line in the README.md indicates a possible flaw in usbguard; can it block new USB keyboards if there is a built-in keyboard or one keyboard plugged in via a non-USB method such as PS/2?
This is just an example; you can block USB keyboards entirely (but check lsusb first, as some physically built-in devices are internally USB), but probably can't automatically check whether there's a non-USB keyboard. You can also allow only those devices currently connected (usbguard generate-policy).
