On Fri 15 May 2026 at 19:58:06 (+0200), [email protected] wrote: > On Fri, May 15, 2026 at 12:39:17PM -0400, Stefan Monnier wrote: > > >> To bring this discussion back to Debian: does someone here know of a way > > >> to configure Debian so it asks for explicit confirmation before > > >> accepting new USB devices? > > > I fear you'll have to run with a big harvester through your udev rules. > > > OTOH, it makes sense -- there are other pluggable thingies besides USB. > > > A web search with "hardened" and "udev" doesn't turn up much for me, but > > > I'd try this approach. > > > > I tried yet another search for such a thingy, and this time I did bump > > into something: USBGuard. > > Oh, good find indeed! > > It seems to be USB specific, but that fits your bill, doesn't it?
Are you sure it's not a rubber ducky :) Cheers, David.
