usblockout
usblockout copied to clipboard
USBLockout monitors your user session and triggers Grsecurity Deny New USB feature.
Consequence of this is that the server daemon sets a default USB deny state, breaking USB ports unless the client is manually started.
Now that user systemd is fully supported the startup script for the user daemon should be ported to it from xdg-autostart.
If one uses the CLI to trigger the lockout, then locks and unlocks the screen, deny new usb will be disabled again. Instead it should detect that it's been manually...