14.7. Authorizing users and groups to use the USBGuard IPC interface

Procédure

1. Edit the /etc/usbguard/usbguard-daemon.conf file with a text editor of your choice:

   # vi /etc/usbguard/usbguard-daemon.conf

2. For example, add a line with a rule that allows all users in the wheel group to use the IPC interface, and save the file:

   IPCAllowGroups=wheel

3. You can add users or groups also with the usbguard command. For example, the following command enables the joesec user to have full access to the Devices and Exceptions sections. Furthermore, joesec can list and modify the current policy:

   # usbguard add-user joesec --devices ALL --policy modify,list --exceptions ALL

   To remove the granted permissions for the joesec user, use the usbguard remove-user joesec command.

4. Restart the usbguard daemon to apply your changes:

   # systemctl restart usbguard