On Fri, May 15, 2026 at 12:39:17PM -0400, Stefan Monnier wrote: > >> To bring this discussion back to Debian: does someone here know of a way > >> to configure Debian so it asks for explicit confirmation before > >> accepting new USB devices? > > I fear you'll have to run with a big harvester through your udev rules. > > OTOH, it makes sense -- there are other pluggable thingies besides USB. > > A web search with "hardened" and "udev" doesn't turn up much for me, but > > I'd try this approach. > > I tried yet another search for such a thingy, and this time I did bump > into something: USBGuard.
Oh, good find indeed! It seems to be USB specific, but that fits your bill, doesn't it? Cheers -- t
signature.asc
Description: PGP signature
