46 lines
1.8 KiB
Nix
46 lines
1.8 KiB
Nix
{
|
|
# USBGuard is a service that allows you to create a whitelist of the USB device you want your system to connect to.
|
|
# Other devices will be blocked by default
|
|
# This minimizes the impact of BadUSB attacks
|
|
services.usbguard = {
|
|
enable = true;
|
|
|
|
# Regular users can interact with usbguard
|
|
IPCAllowedGroups = ["wheel"];
|
|
|
|
rules = ''
|
|
# yaseen
|
|
allow id 1d6b:0002 serial "0000:00:14.0" name "xHCI Host Controller"
|
|
allow id 1d6b:0003 serial "0000:00:14.0" name "xHCI Host Controller"
|
|
allow id 0bda:0129 serial "20100201396000000" name "USB2.0-CRW"
|
|
allow id 048d:ce00 serial "" name "ITE Device(8291)"
|
|
allow id 8087:0025 serial "" name ""
|
|
|
|
# USB Drives
|
|
allow id 0951:1666 serial "D067E5161936F420A61181ED" name "DataTraveler 3.0" # ISO USB
|
|
allow id 346d:5678 serial "FC081FF86A47A" name "Disk 20" # TAILS USB
|
|
allow id abcd:1234 # small usb
|
|
block id 0781:5567 serial "20054963930A6791494D" name "Cruzer Blade" # ?
|
|
block id 048d:1234 serial "9474621090551435743" name "Disk 2.0" # ?
|
|
|
|
# Peripherals
|
|
allow id 046d:c08b serial "178D316C3832" name "G502 HERO Gaming Mouse"
|
|
allow id 1ea7:0907 serial "SN0000000001" name "USB-HID Gaming Keyboard"
|
|
allow id 0bc2:231a serial "2HC015KJ" name "Expansion" # USB-SATA adapter
|
|
allow id 1058:0704 name "External HDD " # USB-SATA adapter
|
|
allow id 04f9:02d3 serial "E71830G6J592482" name "" # Printer
|
|
|
|
# Phones
|
|
allow id 18d1:4ee1 serial "28051FDH200ATC" name "Pixel 7"
|
|
allow id 2717:ff40 serial "52bb384f0512" name "Redmi 10 2022"
|
|
|
|
allow id 04a9:178a serial "G04A4A" name "MG3600 series"
|
|
|
|
# Baofeng programmer
|
|
allow id 067b:2303 serial "" name "USB-Serial Controller D"
|
|
|
|
allow id 1050:0407 serial "" name "YubiKey OTP+FIDO+CCID"
|
|
'';
|
|
};
|
|
}
|