3 ms·
For those wondering, there is an easy defense against this on Linux, USBGuard (https://usbguard.github.io/ https://usbguard.github.io/) RHEL7+ include USBGuard
by mmh0000 4y ago
For those wondering, there is an easy defense against this on Linux, USBGuard (https://usbguard.github.io/ https://usbguard.github.io/)
RHEL7+ include USBGuard as part of the standard repo [0]
[0] https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/security_guide/sec-using-usbguard https://access.redhat.com/documentation/en-us/red_hat_enterp...
- jimrandomh 4y agoThis isn't very practical as a defense. You can't configure it to ban keyboards, because you still need a keyboard, and you might need to swap keyboards if your original one breaks.
- mmh0000 4y agoThat's not correct, it can block and does block USB keyboards. If your main keyboard was totally dead and you needed to whilelist a replacement keyboard you'd do so by booting into single-user mode.