In the usbguard guide exercise, when you first mount and allow the red usb drive, you will notice in the new rule ending with this in that line: with-connect-type ""
After you do a reboot (as asked in the assignment), and still find the red usb being blocked, try again to allow (with -p) that usb drive. The instructions do say, just try again but not why.
This is what i found:
When you take a look at the rules after you allowed the device again, you will see a second rule for that red usb 'almost' the same but with a slight difference. the second one has at the end: with-connect-type "unknown"
It's due to this difference that the first time you allowed the red drive didnt work after reboot.
Hope this helps others some more!
@IvanLabrovic Thank you for your observation and sharing it along with your input here.
I am also forwarding this to the concerned team for a review of the instruction and may be improve it.
@IvanLabrovic Thank you for your observation and sharing it along with your input here.
I am also forwarding this to the concerned team for a review of the instruction and may be improve it.
Red Hat
Learning Community
A collaborative learning environment, enabling open source skill development.