Find out that all your USB ports are connected to the same USB controller?
You already did it:
what would have happened if it had differet controller for ports, wat would the output be like
If one of the ports was connected to a different USB controller that is not connected to dom0 then when you connect USB device to this USB port it won’t add new device in dom0 lsusb output.
what could these usb controllers be used for?
Webcam/fingerprint scanner/bluetooth/etc.
is it typical with laptops?
Yes.
so any other way u can think of to restrict direct access of usb ports to dom0
Nothing except for USBGuard.
does it need to be downloaded and installed from third party
It’s already installed in dom0.
By default it configured to only allow initialization of input devices in dom0.
You had to disable USBGuard in dom0 because you need to have your USB disk initialized in dom0 for it to work.
So you need to configure the USBGuard to limit the initialization of USB devices according to your case.
it can be made to block other ports right? and will it be secure or just be for namesake
what if i connect a modem and internet through usb will it protect dom0
.
what if i connect a modem and internet through usb will it protect dom0
and how difficult it must be to compromise usb guard
isnt wired connection more secure than wifi, to which anybody can connect
or are there any other ways to get wired connection, i have a usb c type connection. not sure if its using the same usb terminal
How would it protect dom0 and from what?
With the only USB controller in your laptop that has USB ports available externally connected to dom0 you can’t use USB devices in other qubes. It’s not supported to attach the USB devices from dom0 to other qubes.
And it’d be security hazard anyway.
No idea.
Yes.
If your laptop has PCI Express slot or Thunderbolt support then you can connect external PCI Ethernet controller to your laptop.