Hello,

Curently, the postinstall script of the package is generating a default
policy that allows all USB devices conntected at the time of the
installation.

The problem is that there is no guarantee that the user has all the
needed USB devices connected and even that the package will be installed
on the final machine that will be used (VM cloned or chroot)

Looking at the other distributions (ie. Fedora) they are not doing that.

Not sure what should be done here, as no policy might also cause more
issues. Maybe playing with the AuthorizedDefault= option and set it to
internal or wired?

Kind regards,
Laurent Bigonville