Wiki updates as a result of the USB protection swap authored by Opt Out's avatar Opt Out
...@@ -19,7 +19,7 @@ To change the permissions of either files or folders, type the `chmod` command i ...@@ -19,7 +19,7 @@ To change the permissions of either files or folders, type the `chmod` command i
There are plenty of sites that can help you to understand how the `chmod` command works. Search `chmod calculator` with your preferred search engine. There are plenty of sites that can help you to understand how the `chmod` command works. Search `chmod calculator` with your preferred search engine.
## Mounting USB Devices ## Mounting USB Devices
`USBGuard` is present on the installation to prevent auto-mounting of USB Drives, as they are a commonly known attack vector. To allow a USB device to be mounted, you must run `usbguard list-devices` and `usbguard allow-device <number>` from the `admin` account. To permanently save the rule, append a `-p` to the `usbguard allow-device <number>` command. `USBCTL` is present on the installation to prevent auto-mounting of USB Drives, as they are a commonly known attack vector. To allow a USB device to be mounted, you must run `usbctl unprotect`, connect the device, and run `usbctl protect` from the `admin` account.
## Traffic Routing ## Traffic Routing
By default, the packages `openvpn` and `wireguard` are not present on the host. If a VPN is desired, these packages or custom wrappers from the provider must be installed. By default, the packages `openvpn` and `wireguard` are not present on the host. If a VPN is desired, these packages or custom wrappers from the provider must be installed.
... ...
......