11.7. Authorizing users and groups to use the USBGuard IPC interface

Procedure

1. Edit the /etc/usbguard/usbguard-daemon.conf file with the rules you want to add. For example, to allow all users in the wheel group to use the IPC interface, add this line:

   IPCAllowGroups=wheel

2. You can add users or groups also with the usbguard command. For example, the following command enables a user to have full access to the Devices and Exceptions sections and to list and modify the current policy:

   # usbguard add-user <user_name> --devices ALL --policy modify,list --exceptions ALL

   Replace <user_name> with the user name that should receive these permissions.

   You can remove the granted permissions for a user by using the usbguard remove-user <user_name> command.

3. Restart the usbguard daemon to apply your changes:

   # systemctl restart usbguard