USBGuard
A Linux framework that allows or blocks USB devices according to rules you write.
These buttons open the developer's own site, repository or store listing in a new tab. wares.gg does not host downloads.
About USBGuard
USBGuard protects a Linux computer against rogue USB devices, such as BadUSB attacks, by allowing or blocking devices based on their attributes. Policies are written in a dedicated rule language and enforced through the USB device authorization feature in the Linux kernel.
A daemon enforces the policy and exposes an IPC interface, with command-line and GUI tools for interacting with it and a C++ API for other programs. It suits administrators locking down laptops, kiosks and servers.
Strengths
- Rule language for precise allow and block policies
- Uses the kernel's own USB authorization feature
- Command-line, GUI and D-Bus interfaces
Limitations
- Linux only
- Policies need care to avoid locking out your own keyboard or storage
Details
- Pricing
- FreeFree and open source.
- License
- GPL-2.0
- Developer
- The USBGuard contributors
- Platforms
- Linux, Command line
- How it runs
- Downloadable app
- Account
- Not required
- Works offline
- Yes
- Best suited for
- Linux administrators defending machines against untrusted USB devices
- Categories
- Security tools, IT administration
- Last verified
- Added
- Provenance
- Facts checked against the developer's own pages and store listings, 1 sources on file.
Similar software
Related functionality, not necessarily a direct replacement.
SELinux
The userland libraries and tools for Security Enhanced Linux, the kernel's mandatory access control system.
AppArmor
A Linux kernel security module that confines programs to the actions allowed in per-application profiles.
Firejail
A SUID sandbox program that restricts Linux applications using kernel namespaces and seccomp-bpf.
Kicksecure
Hardened Debian derivative with kernel hardening and exploit mitigations.
Lynis
Audit Unix-like systems for hardening opportunities.
