On Fri, May 27, 2016 at 3:08 PM, Rebecca N. Palmer wrote: > They're there to allow building usbguard on systems without those libraries > packaged: > https://dkopecek.github.io/usbguard/blog/2015/USBGuard-on-Ubuntu-14-04
I tend to think users are better served by binary packages or a script that calls wget ./configure and make than embedded code copies. > Upstream already agree they shouldn't be used if system packages are > available: see https://apps.fedoraproject.org/packages/usbguard/sources/spec > lines 55-65 Great. > This is just an example; you can block USB keyboards entirely (but check > lsusb first, as some physically built-in devices are internally USB), but > probably can't automatically check whether there's a non-USB keyboard. You > can also allow only those devices currently connected (usbguard > generate-policy). Thanks for the info. -- bye, pabs https://wiki.debian.org/PaulWise
