An option to allow-device -p regardless of the parent?

[l29ah]

Usually when people want to allow a device connecting to the system, they would like to allow it connecting at whatever path (as they plug it in different ports or sometimes use hubs, docks, etc). Today they have to edit the rules file manually to remove the parent-hash after adding the device. It would be nice if there was a way to not include it in the rules file in the first place.

[radosroka]

Yeah, PRs are welcomed :)

[hartwork]

I'm wondering if it's this true that needs flipping to false:

usbguard/src/Daemon/Daemon.cpp

Line 854 in 64f7169

/*with_parent_hash=*/true);

Would need a closer look.

[radosroka]

IIRC generate-policy -X does something like that. We need to introduce similar flags for the command or invent some filter mechanism without changing the default behavior.