Port-Guard

Port-Guard is a USB port management and security tool designed for Debian. It allows you to control access to USB devices, maintain a custom whitelist, and run an automatic background scan to detect any unauthorized connection.

⚠️ Beta version : The software is functional, but unexpected behavior may still occur. Please report any bugs or anomalies via the issues on the Git repository.

License : GNU GPL v3 Author : k3rnix

🧩 Features

• 🔒 Block / unblock all USB ports.
• 📜 Whitelist management (add, remove, clear).
• 🛰️ Automatic scan daemon (portguard.service).
• 🖥️ Clear and guided CLI interface.
• 🗂️ Detailed logging in : /opt/port-guard/logs/daemon-scan.log.

🚧 Roadmap & Project Checklist

This section serves as a progress board for the various components of the project. It may be updated over Git versions.

🔹 Main software (Shell)

🔹 Graphical Interface (C++ / ImGui)

📦 Installation

CLI version

1. Unplug all external USB devices (except those to include in the initial whitelist).
2. Install the .deb package :
   root@kitploit:~

   sudo dpkg -i PortGuard_1.x.x.deb
   

Default configuration

After installation :

• The WhiteList contains no devices.
• Automatic scan is not enabled by default. You must launch the application and enable it manually via the main menu.

WhiteList Management

• Configuration file : /opt/port-guard/conf/usb-whitelist.conf
• Format : [USB] SERIAL=123456789 MODEL=USB_DISK_x
• You can add, remove, or clear devices via the application's main menu.

Uninstallation

To cleanly uninstall Port-Guard, simply run the option :

sudo portguard -u
# or
sudo portguard --uninstall

This procedure :

• Stops and disables the portguard.service.

• Removes all application files in /opt/port-guard/.

• Removes the binary /usr/local/bin/portguard.

• Removes the desktop file and icon in /usr/share/.

• Removes the system documentation in /usr/share/doc/port-guard/.

• Backs up the WhiteList and logs in /tmp/

• After execution, Port-Guard will be completely removed from the machine.