Am 25.10.2017 um 08:55 schrieb intrigeri:
Stefan Koch:
* Package name : usbauth-notifier
* URL : https://github.com/kochstefan/usbauth-all/usbauth-notifier
FWIW I get an error 404 there.
A notifier for the usbauth firewall against BadUSB attacks. The user
could manually allow or deny USB devices.
I'm curious: what are the pros/cons compared to usbguard, that's
already in Debian?
Sorry, it seems that github have changed some linking of project subfolders.
The usbguard development was supported by RedHat and usbauth was
supported by SUSE. Historical, usbguard was published while the working
on usbauth has already been started.
usbauth could allow/deny usb interfaces using the new usb interface
authorization mechanism that is part of linux 4.4 and above.
See also:
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git/log/?h=v4.4.94&qt=grep&q=interface+auth
Examples:
* allow a storage functionality of a USB device and deny USB Ethernet of
the same device
* allow audio/video functionality of an USB TV card and deny using the
remote control functionality
* allow USB printing/scanning and deny USB storage usage of a
multifunction printer (BTW: the interface mechanism supports denying
user space triggered actions (using USB claiming) like scanning)
usbguard could allow/deny USB devices using the usb device authorization
mechanism of the Linux kernel.
It allows to denying a whole device if one interface of it is considered
as bad (usbauth supports this, too)
usbguard allows creating actions that is not supported by usbauth.
I hope this helps. If you can understand German language you could read
a detailed description:
https://epub.uni-bayreuth.de/3048/1/koch2017sicherheitsaspekte.pdf
Thanks
Stefan
