Package: usbguard Version: 0.6.2+ds1-2 Severity: important usbguard daemon does not start when /etc is placed on read-only filesystem as it tries to open /etc/usbguard/usbguard-daemon.conf with rw permissions and terminates if it cannot do that. As usbguard remains useable without the ability to write to usbguard-daemon.conf it should try to open this file in ro mode instead of terminating if opening in rw mode fails.
-- System Information: Debian Release: buster/sid APT prefers testing APT policy: (1000, 'testing'), (50, 'unstable'), (20, 'stable'), (1, 'experimental') Architecture: amd64 (x86_64) Kernel: Linux 4.11.0-1-amd64 (SMP w/4 CPU cores) Locale: LANG=C.UTF-8, LC_CTYPE=C.UTF-8 (charmap=UTF-8) (ignored: LC_ALL set to C.UTF-8), LANGUAGE=C.UTF-8 (charmap=UTF-8) (ignored: LC_ALL set to C.UTF-8) Shell: /bin/sh linked to /bin/dash Init: unable to detect Versions of packages usbguard depends on: ii dbus 1.10.20-1 ii init-system-helpers 1.48 ii libc6 2.24-12 ii libcap-ng0 0.7.7-3+b1 ii libdbus-1-3 1.10.20-1 ii libdbus-glib-1-2 0.108-2 ii libgcc1 1:7.1.0-7 ii libglib2.0-0 2.52.3-1 ii libseccomp2 2.3.1-2.1 ii libstdc++6 7.1.0-7 ii libusbguard0 0.6.2+ds1-2 usbguard recommends no packages. usbguard suggests no packages. -- Configuration Files: /etc/usbguard/usbguard-daemon.conf changed: RuleFile=/etc/usbguard/rules.conf ImplicitPolicyTarget=reject PresentDevicePolicy=allow PresentControllerPolicy=allow IPCAllowedUsers=nobody DeviceRulesWithPort=false -- no debconf information