usbguard
usbguard copied to clipboard
Implement device tagging
Some devices provide not very useful attribute values. An example being a WiFi USB card having ff:ff:ff as device class:subclass:protocol and ff:00:00 as an interface type. ff is vendor specific, i.e. "not so useful values". An interface type based rule wouldn't match such device if we would use the provided values exactly.
Therefore, it would be nice to have a system to handle these exceptions. One option is to have a tag database which would assign tags for known combination of VID:PID + interface types and maybe something more, it could even use the rule language itself. These tags could be then referenced from the rule set using a "tags" attributes. Like so:
block tags any-of { #network #foobar #baddevice }