Device blocked after suspend despite being allowed in rules about usbguard HOT 8 OPEN

I think this issue is caused by this commit. Not sure about its motive, though.

from usbguard.

About the motive, I thick the actual motive is this one, so I'm not sure anymore whether this bug is valid or not.

from usbguard.

@commandline-be, this may actually not be an USBGuard's issue.

I currently solved the bad behavior by disabling Gnome's USB "security":

$ gsettings set org.gnome.desktop.privacy usb-protection false

Please check my comment on the gnome-setting-daemon bug tracker for further details.

Hope it helps.

from usbguard.

Same issue, tried multiple variations of usbguard config.

After the last config test I just left the screen to auto-lock, on resume all USB devices awoke as expected by policy.
Whenever I manually lock the screen by enabling suspend the "USB 2.1 Hub" is forgotten and must be re-enabled manually.

One test I do which demonstrates the faulty event is systemctl restart usbguard which then disables the devices as if the systems resumed from suspend in the same erroneous way. Regardless, the system correctly resumed just before i wrote this post.

apt show usbguard
Package: usbguard
Version: 1.1.1+ds-3

usbguard get-parameter ImplicitPolicyTarget
block

usbguard get-parameter InsertedDevicePolicy
apply-policy

from usbguard.

@meden With prior experiences I've also tried disabling usb-protection eventually to no avail.
This time it did work, thanks for reminding us.

from usbguard.

@meden forget what i said, this works only 50% of the time, it seems deeper suspend states (or something, speculating) are working against this (as noted before)

How is your experience by now ?

from usbguard.

@commandline-be, as far as I can tell, things are working properly now (with Gnome's USB security disabled). When resuming the laptop, now GDM suggests that I can use the fingerprint to access (although it looks that sometimes it does it only on the second attempt, as I need to hit e.g. ESC a couple of times to "open-close-open" the password box).

Also, I'm not flooded anymore by the notifications coming from all my USB3 HUB's sub-devices.

from usbguard.