usbguard-setup.sh

#!/bin/bash

TextReset='\033[0m'
TextGreen='\033[32m'
TextBlue='\033[34m'
TextLightGrey='\033[37m'
TextBold='\033[1m'

FormatTextPause="$TextReset $TextLightGrey"  # Pause & continue
FormatTextCommands="$TextReset $TextGreen" # Commands to execute
FormatTextSyntax="$TextReset $TextBlue $TextBold" # Command Syntax & other text

# Place before command line to reset text format
FormatRunCommand="echo -e $TextReset"

# Reset text if script exits abnormally
trap 'echo -e $TextReset;exit' 1 2 3 15

clear

echo -e $FormatTextSyntax "
   Installing usbguard ...

"
$FormatRunCommand
yum install -y usbguard
# Create local users for later
useradd usbuser
useradd nousbuser
# This is obviously a terrible security practice, never do this in real life!
echo "usbguard" | passwd --stdin usbuser
echo "rejected" | passwd --stdin nousbuser

echo -e $FormatTextSyntax "
   To create the initial rule set, enter the following command as root:
"
echo -e $FormatTextCommands "
	# usbguard generate-policy > /etc/usbguard/rules.conf

"
$FormatRunCommand
usbguard generate-policy > /etc/usbguard/rules.conf
cat /etc/usbguard/rules.conf

echo -e $FormatTextPause && read -p "<-- Press any key to continue -->" NULL

echo -e $FormatTextSyntax "
   Start the usbguard service

"
systemctl start usbguard
systemctl status usbguard