Usbguard.service loaded but inactive (dead)

How is usbguard activated?

I think it’s activated by default, but you need to add usbcore.authorized_default=0 to the kernel parameters.

Would that look like this?
GRUB_CMDLINE_LINUX="$usbcore.authorized_default=0"

I think it needs to be GRUB_CMDLINE_LINUX="$GRUB_CMDLINE_LINUX usbcore.authorized_default=0"

I assume the $ means you already have a line called GRUB_CMDLINE_LINUX and you want to extend it.

I assume the $ means you already have a line called GRUB_CMDLINE_LINUX and you want to extend it.

I was just following the pattern of the last grub entry, but yes, there is already that line further up.

It’s the correct line, in my file the variable name is included after the $, it might not be needed I don’t know the syntax.

That was the grub in dom0 terminal.
The entry is not in the debian terminal grub entry - should
I add it there as well?

You add it to /etc/default/grub in dom0 and then run grub2-mkconfig -o /boot/grub2/grub.cfg

1 Like

Blockquote run grub2-mkconfig -o /boot/grub2/grub.cfg
Blockquote

“done” was the result. Thank you.