search

USBGuard / usbguard

USBGuard is a software framework for implementing USB device authorization policies (what kind of USB devices are authorized) as well as method of use policies (how a USB device may interact with the system)
https://usbguard.github.io/
GNU General Public License v2.0
1.1k stars 133 forks source link

[question] What is a "parent-hash" #581

Open TheFloatingBrain opened 1 year ago

TheFloatingBrain commented 1 year ago

Hello,

I had some devices which I set rules for with the -p flag. However, they stopped looking, I compared the devices stats to what was in the rules, and there hashes were the same, but their parent hashes were now different, I was wondering what a parent-hash was and if I can assume the device was modified?

Thank you,

muelli commented 1 year ago

I think it refers to the port the device is attached.

The Changelog says:

 - Implemented "parent-hash" attribute for associating a device with its
  parent device.- Implemented "parent-hash" attribute for associating a device with its
  parent device.
TheFloatingBrain commented 1 year ago

Thanks!

Huh' its weird, I am using an adapter, but the two adapters I have have the same parent - hash and they are both different than the parent hash listed in the rules... I wonder what changed.