Skip to content

Commit 00b2f0b

Browse files
authored
[backport] Don't deny smartcards in usb-policy.conf (#6967)
Backport of 651a7b9. Removing this device class from the USB config would let admins configure VMs for digital signing purposes. These devices are also not very useful in Dom0.
2 parents 0678df0 + 30af482 commit 00b2f0b

File tree

1 file changed

+0
-1
lines changed

1 file changed

+0
-1
lines changed

scripts/usb-policy.conf

Lines changed: 0 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -20,7 +20,6 @@ ALLOW:vid=056a pid=00fb class=03 # Wacom DTU tablet
2020
DENY: class=03 subclass=01 prot=01 # HID Boot keyboards
2121
DENY: class=03 subclass=01 prot=02 # HID Boot mice
2222
DENY: class=0a # CDC-Data
23-
DENY: class=0b # Smartcard
2423
DENY: class=e0 # Wireless controller
2524
DENY: class=ef subclass=04 # Miscellaneous network devices
2625
ALLOW: # Otherwise allow everything else

0 commit comments

Comments
 (0)