Linux 6.9 Adds New Build-Time Control Whether To Authorize Attached USB Devices

[Alpha64]

USBGuard uses this infrastructure. I think it is one of the more common daemons that utilizes this. It integrates over dbus to gnome and there is also a notifier available for KDE (https://wiki.archlinux.org/title/USBGuard).

[yoshi314]

The authorization mode default can still be overrode

is that valid English? honest question..

[ssokolow]

If you don't want to authorize it why would you plug it?

Stuff like plugging in a USB stick someone gave you and getting a popup claiming that it's a USB hub containing a USB mass storage device and a keyboard, or other similar malicious compound devices.

Hell, you can buy ready-made USB exploit cables like the O.MG Cable that contain hidden hubs, WiFi transceivers, etc so they seem like they're just cables but actually grant a malicious actor access equivalent to your VPS's remote management console.