Ask Your Question

How to set fedora to require user confirmation before mounting USB?

asked 2014-10-08 11:58:23 -0500

calvinp gravatar image

I have been reading about the latest BadUSB bug that has been making news, and it seems like the bug works by allowing an affected USB device to look to the victim device as if it has been taken out and another device inserted. So, it should be possible to stop this from occurring by forcing Fedora to ask for user confirmation (or a root password, depending on the individual system's needs) before mounting a USB device. Then, if it tried to change what type of device it is, the user would at least have a chance to say no and stop it. Is there any way to make Fedora ask for this by default?

edit retag flag offensive close merge delete


1 Answer

Sort by ยป oldest newest most voted

answered 2016-08-09 13:22:51 -0500

There's now a package in Fedora called usbguard that can help you to defend against unexpected interfaces on a USB device. It doesn't have the ability to ask the user to authenticate himself before authorizing the device but that is a planned feature.

Anyway, using USBGuard, you can create a whitelist for your devices and if the a device is then reprogrammed to include some additional interface (e.g. a keyboard or a network interface for spoofing), then the device won't be authorized. If you use the desktop applet, you'll be presented with a question whether to allow the device or not.

edit flag offensive delete link more

Question Tools

1 follower


Asked: 2014-10-08 11:58:23 -0500

Seen: 1,170 times

Last updated: Oct 08 '14