What Kind of Attacks Does sys-usb Protect Against?

User Support
1

Does sys-usb only defend against physical access attacks, or does it help protect against remote threats as well?

2
3

I read the documentation linked above. I understand that sys-usb protects the system against malicious USB devices. That’s just not in my threat model because I trust my USB devices and physical access to my system is restricted. I’m only really concerned with remote threats. So, given my threat model, is it safe to remove sys-usb?

4

If you don’t use any USB network adapters and you don’t connect your USB devices to the qubes with network access or to the compromised qubes, then there shouldn’t be a way to remotely attack you using USB.

1 Like
5

@MellowPoison Thanks for explaining that. It makes more sense to me now. I re-installed sys-usb.