sys-usb dom0 ask,default_target=dom0
That’s what I do.
Is it good idea to do the same but with mouse,
I have that on ‘ask’ too.
i.e. the same line added but to qubes.InputMouse?
I have PS/2 keyboard & mouse and one PS/2 to USB adapter to which I
can plug both keyboard and mouse.
Well the policy will capture all the things plugged in via USB. So if
you have a laptop and the build in keyboard and mouse show up as PS/2
they won’t be affected (just work). But the PS/2 to USB stuff will be.
Do you have any idea why it is recognized as barcode reader
(13ba_Barcode_Reader) rather than adapter?
I doubt that is your keyboard. Do you have a USB RFID Card Reader? When
I search for “13ba_Barcode_Reader” I get this:
And by the way, is there any way to automatically disable external
keyboard when the screen is locked?
I don’t see a way to disable just the keyboard, but of course you could
shutdown your entire sys-usb when the screen locks and restart it when
the screen gets unlocked. Check out the --watch parameter of
xscreensaver. The BLANK and UNBLANK events.
Would it improve security?
I think so. I’ve put this on my todo list. The only problem I see is
that doing this would also disrupt a backup to an external USB drive.
Gotta think about it a bit more, but I like the idea.