usbguard service won't start about usbguard HOT 11 CLOSED

Executing journalctl -xe -u usbguard should give you some hint on the root cause of the problem.
What permissions/ownership does the rules file have?

from usbguard.

permissions:
-rw-------. 1 luca luca

from usbguard.

What about SELinux? What is the context of the file? Are there any AVCs?

from usbguard.

unconfined_u:object_r:user_home_t:s0 /etc/usbguard/rules.conf

from usbguard.

I believe that the owner/group is not part of the IPCAllowedUsers/IPCAllowedGroups group. There are two ways on how to configure IPC access control, please refer to the IPC ACCESS CONTROL section inside the usbguard-daemon.conf man page.

from usbguard.

unconfined_u:object_r:user_home_t:s0 /etc/usbguard/rules.conf

It should be

-rw-------.   1 root root system_u:object_r:usbguard_rules_t:s0     0 Jul 23  2022 rules.conf

from usbguard.

I changed it to
-rw-------. 1 root root unconfined_u:object_r:user_home_t:s0 1186 Aug 2 10:06 /etc/usbguard/rules.conf

and still not being able to start the service, I already did daemon reload

from usbguard.

Try

sudo restorecon -f /etc/usbguard/rules.conf

from usbguard.

getting the following error:
restorecon: SELinux: Could not get canonical path for allow id 1d6b:0002 serial "0000:00:14.0" name "xHCI Host Controller" hash "jEP/6WzviqdJ5VSeTUY8PatCNBKeaREvo2OqdplND/o=" parent-hash "rV9bfLq7c2eA4tYjVjwO4bxhm+y6GgZpl9J60L0fBkY=" with-interface 09:00:00 with-connect-type "" restorecon: No such file or directory.

from usbguard.

getting the following error: restorecon: SELinux: Could not get canonical path for allow id 1d6b:0002 serial "0000:00:14.0" name "xHCI Host Controller" hash "jEP/6WzviqdJ5VSeTUY8PatCNBKeaREvo2OqdplND/o=" parent-hash "rV9bfLq7c2eA4tYjVjwO4bxhm+y6GgZpl9J60L0fBkY=" with-interface 09:00:00 with-connect-type "" restorecon: No such file or directory.

Sorry, I made a mistake. -f does something different.

sudo restorecon -v /etc/usbguard/rules.conf 

from usbguard.

that did the trick!

from usbguard.