usbguard - A tool for implementing USB device usage policy

Property Value
Distribution openSUSE Tumbleweed
Repository openSUSE Hardware all
Package name usbguard
Package version 0.6.2
Package release 3.22
Package architecture x86_64
Package type rpm
Installed size 172.92 KB
Download size 72.52 KB
Official Mirror
The USBGuard software framework helps to protect your computer against rogue USB
devices by implementing basic whitelisting/blacklisting capabilities based on
USB device attributes.


Package Version Architecture Repository
usbguard-0.6.2-3.22.i586.rpm 0.6.2 i586 openSUSE Hardware
usbguard-0.6.2-1.3.i586.rpm 0.6.2 i586 openSUSE Oss
usbguard-0.6.2-1.3.x86_64.rpm 0.6.2 x86_64 openSUSE Oss
usbguard - - -


Name Value - - - - - - - - - - - - - -
systemd -


Name Value
config(usbguard) = 0.6.2-3.22
usbguard = 0.6.2-3.22
usbguard(x86-64) = 0.6.2-3.22


Type URL
Binary Package usbguard-0.6.2-3.22.x86_64.rpm
Source Package usbguard-0.6.2-3.22.src.rpm

Install Howto

  1. Add the openSUSE Hardware repository:
    # zypper addrepo opensuse-hardware
  2. Install usbguard rpm package:
    # zypper install usbguard




2017-09-06 -
- updated to 0.7.0
- Added
Added InsertedDevicePolicy configuration option to control the policy method for inserted devices.
Added RestoreControllerDeviceState configuration option.
Added DeviceManagerBackend configuration option. This option can be used to select from several device manager backend implementations.
Implemented an uevent based device manager backend.
Added setParameter, getParameter IPC (incl. D-Bus) methods.
Added set-parameter, get-parameter CLI subcommands.
Qt Applet: Added Spanish (es_AR) translation.
Create empty rules.conf file at install time (make install).
Support for numeric UID/GID values in IPCAllowedUsers and IPCAllowedGroups settings.
If bash completion support is detected at configure time, install the bash completion script during make install.
Added new configuration setting: IPCAccessControlFiles.
IPC access is now configurable down to a section and privilege level per user and/or group.
Added add-user, remove-user usbuard CLI subcommands for creating, removing IPC access control files.
Added AuditFilePath configuration option for setting the location of the USBGuard audit events log file path. If set, the usbguard-daemon will log policy and device related actions and whether they succeeded or not.
- Removed
Removed UDev based device manager backend and UDev related dependencies.
Removed UDev development files/API dependecy
- Changed
Reset Linux root hub bcdDevice value before updating device hash. This is a backwards incompatible change because it changes how the device hash is computed for Linux root hub devices.
Refactored low-level USB device handling into SysFSDevice class which represents a device in the /sys filesystem (sysfs).
Removed usage of readdir_r because it's obsolete. Replaced with readdir with the assumption that its usage is thread-safe if the directory handle passed to it is not shared between threads.
Extended test suite with use case tests.
Install the usbguard-daemon configuration and policy file with strict file permissions to prevent policy leaks.
Fixed several memory leaks.
Don't pre-resolve user and group names in IPCAllowedUsers and IPCAllowedGroups settings. Instead, resolve the name during the IPC authentication phase.
- Updated to 0.6.2
Wait for disconnect in IPCClient dtor if needed
Qt Applet: Fixed loading of decision method and default decision settings
- Updated to 0.6.1
- Changed
Refactored logging subsystem
Fixed handling of IPC disconnect in the IPCClient class
Qt Applet: Fixed handling of main window minimization and maximization
Fixed building on architectures that don't provide required atomic operations.
The libatomic emulation library will be used in such cases.
Fixed several typos in the documentation
- Added
Implemented a simple internal logger
Access to the logger via public API
Improved logging coverage. Logging output can be enabled either via
CLI options or by setting the USBGUARD_DEBUG environment variable to 1.
Qt Applet: UI translation support.
Qt Applet: Czech (cs_CZ) translation
- Removed
Removed spdlog dependency
- ....  ommitted changes from 0.5* series ..
2016-03-01 -
- split off a library package libusbguard0
2016-01-31 -
- a daemon and framework and tools to guard against bad usb

See Also

Package Description
usbguard-devel-0.6.2-3.22.i586.rpm Development files for usbguard
usbguard-devel-0.6.2-3.22.x86_64.rpm Development files for usbguard
usbguard-tools-0.6.2-3.22.i586.rpm USBGuard Tools
usbguard-tools-0.6.2-3.22.x86_64.rpm USBGuard Tools
usbmuxd-1.1.0-72.18.i586.rpm A socket daemon to multiplex connections from and to iOS devices
usbmuxd-1.1.0-72.18.x86_64.rpm A socket daemon to multiplex connections from and to iOS devices
usbprog-0.2.0-36.35.i586.rpm Programmer for the USBprog hardware
usbprog-0.2.0-36.35.x86_64.rpm Programmer for the USBprog hardware
usbprog-devel-0.2.0-36.35.i586.rpm Development files for libusbprog
usbprog-devel-0.2.0-36.35.x86_64.rpm Development files for libusbprog
usbprog-gui-0.2.0-36.35.i586.rpm GUI program of USBprog
usbprog-gui-0.2.0-36.35.x86_64.rpm GUI program of USBprog
usbredir-0.7.1-24.34.i586.rpm A protocol for redirection USB traffic
usbredir-0.7.1-24.34.x86_64.rpm A protocol for redirection USB traffic
usbredir-devel-0.7.1-24.34.i586.rpm A protocol for redirection USB traffic - Development files