Seusb2 - Versionsgeschichte

Codecivil: /* How to get */

2017-04-21T12:30:25Z

How to get

Codecivil: /* Installation */

2017-04-21T12:25:22Z

Installation

Codecivil: Added a section "Why..."

2017-04-21T12:22:36Z

Added a section "Why..."

Codecivil: /* About */

2017-04-19T13:39:46Z

About

Codecivil: /* Installation */

2017-04-19T13:38:59Z

Installation

Codecivil: /* Installation */

2017-04-19T13:37:53Z

Installation

Codecivil: /* About */

2017-04-19T13:31:19Z

About

Codecivil: /* About */

2017-04-19T13:12:24Z

About

Codecivil: Description of the seusb2 package

2017-04-19T13:11:36Z

Description of the seusb2 package

Neue Seite

Authorizing USB input devices

== About ==

Security Enhanced USB 2 is the second approach to securing USB devices. The first approaach is based on usbmon and tries to detect changes in the firmware. It is not yet on Github.

This shell script package using udev is for authorizing USB input devices. Newly connected devices are disabled until a user (of the group seusb2) authorizes its use in a pop-up dialogue. In order to avoid lockouts authorization can also be done by pressing the power button. This feature requires acpid.

WARNING: Most USB input devices, like keyboards or mouses, come without a distinguished serial number. So, authorization is based on vendor and product id, allowing attackers to spoof these data to match already authorized devices.

The source code is under LGPL3 and available on Github: [https://github.com/codecivil/seusb2 https://github.com/codecivil/seusb2]

The tarball and the binary Debian package is available here: [[Datei:seusb2_1.0.orig.tar.gz]]
[[Datei:seusb2_1.0-1_all.deb]]

== Dependencies ==

udev
inotify-tools
zenity
bash (>= 3.2)
adduser
acpid

== Installation ==

1. Download the Debian package above.

2. Install the dependencies
<nowiki>sudo apt-get install udev inotify-tools zenity bash adduser acpid</nowiki>

3. Install the package
<nowiki>sudo dpkg -i seusb2_1.0-1_all.deb</nowiki>
(alternatively, download the tarball and build the package for yourself)

4. Add seusb2 users
For every USERNAME you want to allow authorizing new USB input devices, do
<nowiki>sudo usermod -aG seusb2 USERNAME</nowiki>

5. Login as a seusb2 user. If you are already logged in, logout first. *This will display the dialogues for existing USB input devices. If you do not authorize them now, they will be unavailable after next boot.*

@@ Zeile 11: / Zeile 11: @@
 The source code is under LGPL3 and available on Github: [https://github.com/codecivil/seusb2 https://github.com/codecivil/seusb2]
-The tarball and the binary Debian package is available here: [[Datei:seusb2_1.0.orig.tar.xz]]
+The tarball and the binary Debian package are available here: [[Datei:seusb2_1.0.orig.tar.xz]]
 [[Datei:seusb2_1.0-1_all.deb]]

← Nächstältere Version		Version vom 19. April 2017, 13:38 Uhr
Zeile 38:		Zeile 38:
	sudo usermod -aG seusb2 USERNAME		sudo usermod -aG seusb2 USERNAME

−	5. Login as a seusb2 user. If you are already logged in, logout first. This will display the dialogues for existing USB input devices. If you do not authorize them now, they will be unavailable after next boot.	+	5. Login as a seusb2 user. If you are already logged in, logout first. '''This will display the dialogues for existing USB input devices. If you do not authorize them now, they will be unavailable after next boot.'''

@@ Zeile 41: / Zeile 41: @@
 (alternatively, download the tarball and build the package for yourself)
-. Add seusb2 users
+. Add seusb2 users. For every USERNAME you want to allow authorizing new USB input devices, do
      sudo usermod -aG seusb2 USERNAME
 . Login as a seusb2 user. If you are already logged in, logout first. '''This will display the dialogues for existing USB input devices. If you do not authorize them now, they will be unavailable after next boot.'''

@@ Zeile 6: / Zeile 6: @@
 This shell script package using udev is for authorizing USB input devices. Newly connected devices are disabled until a user (of the group seusb2) authorizes its use in a pop-up dialogue. In order to avoid lockouts authorization can also be done by pressing the power button. This feature requires acpid.
 WARNING: Most USB input devices, like keyboards or mouses, come without a distinguished serial number. So, authorization is based on vendor and product id, allowing attackers to spoof these data to match already authorized devices.
 The source code is under LGPL3 and available on Github: [https://github.com/codecivil/seusb2 https://github.com/codecivil/seusb2]

@@ Zeile 28: / Zeile 28: @@
 . Install the dependencies
-<nowiki>sudo apt-get install udev inotify-tools zenity bash adduser acpid</nowiki>
+    sudo apt-get install udev inotify-tools zenity bash adduser acpid
 . Install the package
-<nowiki>sudo dpkg -i seusb2_1.0-1_all.deb</nowiki>
+    sudo dpkg -i seusb2_1.0-1_all.deb
 (alternatively, download the tarball and build the package for yourself)
 . Add seusb2 users
 For every USERNAME you want to allow authorizing new USB input devices, do
-<nowiki>sudo usermod -aG seusb2 USERNAME</nowiki>
+    sudo usermod -aG seusb2 USERNAME
 . Login as a seusb2 user. If you are already logged in, logout first. *This will display the dialogues for existing USB input devices. If you do not authorize them now, they will be unavailable after next boot.*

@@ Zeile 3: / Zeile 3: @@
 == About ==
-Security Enhanced USB 2 is the second approach to securing USB devices. The first approaach is based on usbmon and tries to detect changes in the firmware. It is not yet on Github.
+Security Enhanced USB 2 is the second approach to securing USB devices. (The first approach is based on usbmon and tries to detect changes in the firmware. It is not yet on this wiki.)
 This shell script package using udev is for authorizing USB input devices. Newly connected devices are disabled until a user (of the group seusb2) authorizes its use in a pop-up dialogue. In order to avoid lockouts authorization can also be done by pressing the power button. This feature requires acpid.
@@ Zeile 13: / Zeile 13: @@
 The tarball and the binary Debian package is available here: [[Datei:seusb2_1.0.orig.tar.gz]]
 [[Datei:seusb2_1.0-1_all.deb]]
-−
 == Dependencies ==