diff options
| author | Daniel Micay <danielmicay@gmail.com> | 2021-03-06 16:30:21 -0500 |
|---|---|---|
| committer | Daniel Micay <danielmicay@gmail.com> | 2021-03-06 16:30:21 -0500 |
| commit | 3dac70a1ddd017e98c4b7c0597cc80b484ac5e0b (patch) | |
| tree | c9718883a03e79da882847f5b89dc2590ca45310 /static/usage.html | |
| parent | 47f40b239107cc3b4cb5340af60f7c165b47d260 (diff) | |
add back USB peripherals section
Diffstat (limited to 'static/usage.html')
| -rw-r--r-- | static/usage.html | 20 |
1 files changed, 20 insertions, 0 deletions
diff --git a/static/usage.html b/static/usage.html index da0971c1..005b1bac 100644 --- a/static/usage.html +++ b/static/usage.html @@ -205,6 +205,26 @@ </section> </section> + <section id="usb-peripherals"> + <h2><a href="#usb-peripherals">USB peripherals</a></h2> + + <p>GrapheneOS defaults to ignoring connected USB peripherals when the device is + already booted and the screen is locked. A USB device already connected at boot + will still work. The purpose is reducing attack surface for a locked device with + active login sessions to user profiles to protect data that's not at rest. This + can be controlled in Settings ➔ Security ➔ USB accessories. The options are:</p> + + <ul> + <li>Disallow new USB peripherals</li> + <li>Allow new USB peripherals when unlocked (default)</li> + <li>Allow new USB peripherals (like stock Android)</li> + </ul> + + <p>This option has no impact on the device acting as a USB peripheral itself when + connected to a computer. Android defaults to charge only mode and requires opt-in + opt-in to the device being used for file transfer, USB tethering, MIDI or PTP.</p> + </section> + <section id="web-browsing"> <h2><a href="#web-browsing">Web browsing</a></h2> |