Unverified Commit 99c0c32a authored by Ameya Shenoy's avatar Ameya Shenoy
Browse files

usbguard: fix policy enums 

The available policies for `InsertedDevicePolicy` and
`ImplicitPolicyTarget` differ from the defined policy enum. This change
is to prevent users from configuring incorrect policies for `usbguard`

Related `usbguard` documentation
https://usbguard.github.io/documentation/configuration.html



Signed-off-by: default avatarAmeya Shenoy <shenoy.ameya@gmail.com>
parent 8e9fa2dd

nixos/modules/services/security/usbguard.nix

+2 −2
Original line number Diff line number Diff line
@@ -80,7 +80,7 @@ in 
      };



      implicitPolicyTarget = mkOption {

        type = policy;

        type = types.enum [ "allow" "block" "reject" ];

        default = "block";

        description = lib.mdDoc ''

          How to treat USB devices that don't match any rule in the policy.
@@ -110,7 +110,7 @@ in 
      };



      insertedDevicePolicy = mkOption {

        type = policy;

        type = types.enum [ "block" "reject" "apply-policy" ];

        default = "apply-policy";

        description = lib.mdDoc ''

          How to treat USB devices that are already connected after the daemon