Package: usbguard Version: 0.7.8+ds-2+b1 Severity: normal Tags: upstream Since upgrading to linux-image-5.9.0-amd64, it's no longer possible to usbguard allow-device without -p, as the device is deauthorized again immediately.
This issue was reported upstream as https://github.com/USBGuard/usbguard/issues/444 and fixed by https://github.com/USBGuard/usbguard/pull/440, and I can confirm that adding that patch to the Debian package fixes the problem. The issue only affects kernels since 5.9.0 because a change uevent is now emitted after the device is authorized: https://bugzilla.kernel.org/show_bug.cgi?id=209469 The issue is fixed in usbguard 1.0.0 which was released today: https://github.com/USBGuard/usbguard/releases/tag/usbguard-1.0.0 -- System Information: Debian Release: bullseye/sid APT prefers testing APT policy: (990, 'testing'), (990, 'stable'), (500, 'unstable-debug'), (500, 'testing-debug'), (500, 'stable-debug'), (500, 'unstable'), (500, 'stable'), (1, 'experimental-debug'), (1, 'experimental') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 5.9.0-1-amd64 (SMP w/4 CPU threads) Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_CPU_OUT_OF_SPEC, TAINT_USER, TAINT_WARN, TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE Locale: LANG=cs_CZ.UTF-8, LC_CTYPE=cs_CZ.UTF-8 (charmap=UTF-8), LANGUAGE not set Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) LSM: AppArmor: enabled Versions of packages usbguard depends on: ii dbus 1.12.20-1 ii init-system-helpers 1.60 ii libaudit1 1:3.0-2 ii libc6 2.31-9 ii libcap-ng0 0.7.9-2.2+b1 ii libgcc-s1 10.2.1-3 ii libglib2.0-0 2.66.4-1 ii libseccomp2 2.5.1-1 ii libstdc++6 10.2.1-3 ii libusbguard0 0.7.8+ds-2+b1 usbguard recommends no packages. usbguard suggests no packages. -- Configuration Files: /etc/usbguard/usbguard-daemon.conf [Errno 13] Operace zamítnuta: '/etc/usbguard/usbguard-daemon.conf' -- no debconf information -- Tomáš Janoušek, a.k.a. Pivník, a.k.a. Liskni_si, https://work.lisk.in/
