Using usbguard is pretty essential to protect against common attacks like malicious devices, rubber duckies, OMG cables or the “governmental 3 letter agency equivalents”. Especially thunderbolt (which can be blocked globally, see this config as to how can grant attackers access to your RAM, which means encryption keys and more. 1. Install usbguard This depends on your distro, on Fedora sudo dnf install -y usbguard usbguard-notifier usbguard-selinux On Fedora Atomic Desktops (Silverblue, Kino...