Problems with Kicksecure-18 in Qubes OS (usbguard in sys-qubes)

Hello. I’m not a very advanced user and I’ve run into difficulties with kicksecure‑18 in Qubes. I want to set up sys‑net, sys‑firewall, and sys‑usb on a Kicksecure template. I’m using a USB‑Wi‑Fi adapter, and usbguard always blocks it. I disabled usbguard.service in Kicksecure template, but that didn’t help - Wi‑Fi adapter is still blocked. Could you write a wiki instruction for handling cases like this?

I also keep receiving notifications:
denied: sdwdate-gui.connectCheck from sys‑usb (sys‑firewall, sys‑net) to sys‑whonix.
upd. It seems I’ve found a solution in the wiki for denied: sdwdate-gui.connectCheck

1 Like

Are you not getting notifications when the adapter is blocked? If you are, you can immediately allow the adapter by clicking the “Allow” button (or whatever it’s called, I don’t remember at the moment) in the notification popup.

I don’t really understand why disabling the service in the template isn’t working. Will test here and document what needs to be done to turn it off if the steps end up being harder than a simple sudo systemctl disable usbguard.service command.

1 Like

Found the issue, usbguard-dbus.service also needs disabled with sudo systemctl disable usbguard-dbus.service. Once both this and usbguard.service are disabled, USB devices are transparently accepted in a Kicksecure-based sys-usb.

Documented at:

2 Likes

thanks!

2 Likes