USBGuard is a niche software in the Linux world, I’m aware of that. We don’t face the same threat from plugging random USB devices on our machines as Windows users do. But there’s still some risk involved in doing so, and for those use-cases, it not only exists, but can be perfectly integrated with GNOME Settings and be basically invisible to the average user if set up correctly.
Fedora being one of the best distros when it comes to security out of the box, I would like to know if there ever was a discussion on including it by default on the Workstation edition, and if not, to start that discussion myself.
Although I am only a user myself, and have used it successfully, I do not think it should/could be a default app in distros in its
current form. A lot of newbs to Linux and Cli (Command Line Interface) I feel would be a bit overwhelmed by understanding/using it (I was doing quite a bit of reading before using it myself).
However it is not to say this isn’t needed, though, and I feel
a simpler, gui based version needs to be developed for integration as a mainline app.
Additionally, the recent crop of immutable distros have effectively Banned it and other mainstream apps from apt and other
pkg managers due to the way the core of the OS Must remain read-only and can not control the apps function as it does in traditional OS’s.
Therefore until usbguard and other traditional
apps in pkg managers alter and migrate their apps to either Appimage, Flatpak, or Snap, you
can only run temporary instances of these apps
In Distrobox or similar, which don’t address the need for these apps to have permanence on the system. This also prevents these apps from
being added/bundled by default in Atomic/Immutable distros.