NAME

       usbguard-daemon - USBGuard daemon

SYNOPSIS

       usbguard-daemon [OPTIONS]

DESCRIPTION

       The usbguard-daemon is the main component of the USBGuard software framework. It runs as a
       service in the background and enforces the USB device authorization policy for all USB
       devices. The policy is defined by a set of rules using a rule language described in
       usbguard-rules.conf(5). The policy and the authorization state of USB devices can be
       modified during runtime using the usbguard(1) tool.

OPTIONS

       -d
           Enable debugging messages in the log.

       -f
           Enable classical daemon behavior (fork at start, sysV compliant).

       -s
           Log to syslog.

       -k
           Log to console. (default)

       -K
           Disable Logging to console.

       -l path
           Log to a file at path.

       -p path
           Write PID to a file at path (default: /var/run/usbguard.pid).

       -c path
           Load configuration from a file at path (default: /etc/usbguard/usbguard-daemon.conf).

       -P
           Disable permissions check on conf and policy files (default:
           /etc/usbguard/usbguard-daemon.conf).

       -C
           Drop capabilities to limit privileges of the process.

       -W
           Use a seccomp whitelist to limit available syscalls to the process.

       -h
           Show the help/usage screen.

SECURITY CONSIDERATIONS

       The daemon provides the USBGuard public IPC interface. Depending on your distribution
       defaults, the access to this interface is limited to a certain group or a specific user
       only. Please refer to the usbguard-daemon.conf(5) man page for more information on how to
       configure the ACL correctly. Do not leave the ACL unconfigured as that will expose the IPC
       interface to all local users. That will allow them to manipulate the authorization state
       of USB devices and modify the USBGuard policy.

SEE ALSO

       usbguard-daemon.conf(5), usbguard-rules.conf(5), usbguard(1)

BUGS

       If you find a bug in this software or if you’d like to request a feature to be
       implemented, please file a ticket at https://github.com/USBGuard/usbguard/issues/new.

AUTHOR

       USBGuard was originally written by Daniel Kopeček. Many people have contributed to it.

RESOURCES

       Main web site: https://usbguard.github.io/

COPYING

       License GPLv2+: GNU GPL version 2 or later http://gnu.org/licenses/gpl.html. This is free
       software: you are free to change and redistribute it. There is NO WARRANTY, to the extent
       permitted by law.

                                            04/01/2024                         USBGUARD-DAEMON(8)