From 99ff4757ec10d24619eb652fc90286474cbffabf Mon Sep 17 00:00:00 2001
From: qoijjj <129108030+qoijjj@users.noreply.github.com>
Date: Tue, 25 Jun 2024 17:47:45 -0700
Subject: [PATCH] feat: add usbguard and yafti ujust commands

---
 .../usr/share/ublue-os/just/60-custom.just      | 17 +++++++++++++++++
 1 file changed, 17 insertions(+)

diff --git a/config/files/usr/share/ublue-os/just/60-custom.just b/config/files/usr/share/ublue-os/just/60-custom.just
index 42f8573..d9acefe 100644
--- a/config/files/usr/share/ublue-os/just/60-custom.just
+++ b/config/files/usr/share/ublue-os/just/60-custom.just
@@ -140,3 +140,20 @@ override-reset-module mod_name:
     else
       echo "No override found for $MOD_NAME module."
     fi
+
+
+# Setup USBGuard
+setup-usbguard:
+    #!/usr/bin/pkexec /usr/bin/bash
+    echo "Notice: This will generate a policy based on your existing connected USB devices."
+    sudo mkdir -p /var/log/usbguard
+    sudo systemctl enable --now usbguard.service
+    sudo systemctl enable --now usbguard-dbus.service
+    if command -v gsettings &> /dev/null; then
+        gsettings set org.gnome.desktop.privacy usb-protection-level always
+        gsettings set org.gnome.desktop.privacy usb-protection true
+    fi
+
+# Rerun Yafti
+rerun-yafti:
+    yafti -f /usr/share/ublue-os/firstboot/yafti.yml