From 6c5f9fc03b1390e037bc709b05930455ed111833 Mon Sep 17 00:00:00 2001
From: Sergei Poljanski <me@asxp.io>
Date: Sat, 31 Jan 2026 06:03:22 +0200
Subject: [PATCH] turn off usbguard

---
 modules/security.nix | 15 +++++----------
 1 file changed, 5 insertions(+), 10 deletions(-)

diff --git a/modules/security.nix b/modules/security.nix
index 2953030..c3fa3ea 100644
--- a/modules/security.nix
+++ b/modules/security.nix
@@ -1,12 +1,12 @@
 { config, pkgs, lib, ... }:
 
 {
-  imports = [
-    ./usb-devices.nix
-  ];
+  # imports = [
+  #   ./usb-devices.nix
+  # ];
 
   # Use the hardened kernel for better security
-  boot.kernelPackages = lib.mkForce pkgs.linuxPackages_hardened;
+  # boot.kernelPackages = lib.mkForce pkgs.linuxPackages_hardened;
 
   # Only allow members of the wheel group to execute sudo
   security.sudo.execWheelOnly = true;
@@ -44,7 +44,7 @@
 
   # USBGuard configuration
   services.usbguard = {
-    enable = true;
+    enable = false;
     dbus.enable = true;
     implicitPolicyTarget = "block";
   };
@@ -56,11 +56,6 @@
     { domain = "*"; item = "core"; type = "-"; value = "0"; }
   ];
 
-  systemd.services.systemd-udevd.serviceConfig = {
-    PrivateNetwork = true;
-    RestrictAddressFamilies = "AF_UNIX AF_NETLINK";
-  };
-
   # Podman socket for all users
   systemd.user.sockets.podman.wantedBy = [ "sockets.target" ];