Hi Hannes, yes, if there is a way to do it either via the management console or via another method, that'd be great. While I don't think USBGuard needs to be completely disabled as I see benefit in using it, allowing specific device types would be beneficial. I suspect that might be able to be scripted in when the STIG is being applied but I don't know the mechanics of how that all works. I do like the idea of booting single user mode to modify /etc/usbguard/rules.conf, though that's an additional source of pain during the setup process, but it's also not the end of the world.
Statistics: Posted by dloseke — Jun 26, 2025 5:03 pm
