On Linux, udevadm issues a trigger on boot so all the "ATTACH" events in rules get triggered on boot.
FreeBSD does not have this.
So you write a devd rule to trigger on USB "ATTACH" event, and it works only if you if you plug something in after you booted. Beautiful.
But if you reboot, the rule is not triggered (USB device attaches before devd is run), so you are forced to add a crontab @reboot to effectuate the rule.
This introduces a several second delay between USB attachment during boot and the rule execution, which is a security issue.
I do not want one of two of a USB device's interface to ever connect to my system, not even for 3 seconds.
Is there a way to mitigate this?
FreeBSD does not have this.
So you write a devd rule to trigger on USB "ATTACH" event, and it works only if you if you plug something in after you booted. Beautiful.
But if you reboot, the rule is not triggered (USB device attaches before devd is run), so you are forced to add a crontab @reboot to effectuate the rule.
This introduces a several second delay between USB attachment during boot and the rule execution, which is a security issue.
I do not want one of two of a USB device's interface to ever connect to my system, not even for 3 seconds.
Is there a way to mitigate this?