This community guide collects recommendations for improving security and privacy on macOS.
USBGuard
Set USB device authorization rules with USBGuard, a framework for controlling device access.

About USBGuard
USBGuard is a software framework for Linux for implementing USB device authorization policies and method-of-use policies. It works as a USB device allowlisting tool that controls what kinds of USB devices are authorized and how a device may interact with the system.
It runs as a daemon using a rules file and can generate an initial policy from currently attached devices. A rules file must be generated before starting the daemon for the first time, or attached devices including mouse and keyboard may stop working and lock the user out.
Key features
- Authorize USB devices based on allowlist rules
- Control how authorized USB devices interact with system
- Generate initial policy from currently connected devices
- Run as background daemon with systemd service unit
- Configure rules via usbguard-rules.conf policy file
- Optional LDAP support at compile time
- Focuses on USB device authorization and use policies
- Can generate initial rules from currently attached devices
- Open source with manual pages for daemon and configuration
- Designed for Linux only
- Requires generating a policy before first start to avoid lockout
- Building from source requires C++17 and multiple dependencies
USBGuard at a glance
- Website
- github.com/USBGuard/usbguard
- Category
- Privacy & Security › Desktop & OS Privacy
- Type
- Open-source project
- Pricing
- Not confirmed. Check the site
- Platforms
- Linux
- Open source
- Yes · Source code
- Language
- English
- Last checked
- Oct 5, 2026 · Online when checked
- Listed
- Oct 5, 2026
USBGuard alternatives
Tools and sites you could use instead, ranked by how closely they match.
Authorize binary execution and file access on macOS with Santa, a system extension and policy tool.
Follow this evolving guide for steps and configuration examples to secure a Linux server.
This guide collects Linux kernel and userland settings for improving security and usability, targeting Arch Linux and potentially other distributions.
Tracee monitors runtime security events and supports forensic analysis with eBPF instrumentation.
Qubes OS is a free, open-source operating system for personal computers that uses compartmentalization as a security approach.
Popular in Desktop & OS Privacy
Well-known listings from the same topic.
USBGuard FAQ
How do I prevent being locked out when starting USBGuard for the first time?
What is required to compile USBGuard from source?
Tell us and an editor will check it.
Claim the listing and suggest updates yourself. An editor checks every claim first.











