summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorDaniel Micay <danielmicay@gmail.com>2021-03-06 16:30:21 -0500
committerDaniel Micay <danielmicay@gmail.com>2021-03-06 16:30:21 -0500
commit3dac70a1ddd017e98c4b7c0597cc80b484ac5e0b (patch)
treec9718883a03e79da882847f5b89dc2590ca45310
parent47f40b239107cc3b4cb5340af60f7c165b47d260 (diff)
add back USB peripherals section
-rw-r--r--static/usage.html20
1 files changed, 20 insertions, 0 deletions
diff --git a/static/usage.html b/static/usage.html
index da0971c1..005b1bac 100644
--- a/static/usage.html
+++ b/static/usage.html
@@ -205,6 +205,26 @@
</section>
</section>
+ <section id="usb-peripherals">
+ <h2><a href="#usb-peripherals">USB peripherals</a></h2>
+
+ <p>GrapheneOS defaults to ignoring connected USB peripherals when the device is
+ already booted and the screen is locked. A USB device already connected at boot
+ will still work. The purpose is reducing attack surface for a locked device with
+ active login sessions to user profiles to protect data that's not at rest. This
+ can be controlled in Settings ➔ Security ➔ USB accessories. The options are:</p>
+
+ <ul>
+ <li>Disallow new USB peripherals</li>
+ <li>Allow new USB peripherals when unlocked (default)</li>
+ <li>Allow new USB peripherals (like stock Android)</li>
+ </ul>
+
+ <p>This option has no impact on the device acting as a USB peripheral itself when
+ connected to a computer. Android defaults to charge only mode and requires opt-in
+ opt-in to the device being used for file transfer, USB tethering, MIDI or PTP.</p>
+ </section>
+
<section id="web-browsing">
<h2><a href="#web-browsing">Web browsing</a></h2>