What it does
USBGuard is a Linux framework for allowing or blocking USB devices based on device attributes and a configurable authorization policy.
USBGuard makes attaching a USB device a policy decision. Its project page describes a rule language, enforcement daemon and management interfaces built on Linux's USB authorization feature. Inventory required keyboards, storage and other peripherals before enforcing an allowlist. Keep an administrative recovery path if an essential device is blocked. The project currently supports Linux only, a substantive platform limit for a mixed fleet.
Strengths
- Explicit USB-device authorization rules
Watch out for
- The official project currently supports Linux only
Best for
- Linux administrators controlling attached USB devices
Sources
- home | USBGuard (Oct 26, 2026)