Usbguard on Debian
------------------

Since usbguard 0.7.5 the debian package creates an initial policy at
installation time using the `usbguard generate-policy` subcommand. This
generates an allow policy for all connected usb devices.

To list all devices with the current active rules use `usbguard list-devices`.

To allow a blocked device, use `usbguard allow-device <id>` where is the id
listed at the beginning of the line of the `list-devices` output. To block a
device use `usbguard block-device`. To allow or block a device permanently use
the `-p` switch for the `allow-device` or `block-device` subcommands.
You can list the permanent rules using `usbgurad list-rules`.

# usbguard IPC interface

The USBGuard daemon provides a public IPC interface. On Debian Usbguard is
configured to allow the `plugdev` group access to the IPC interface. This is
done  using an `IPCAccessControlFile` that is created at install time in
`/etc/usbguard/IPCAccessControl.d/`.