diff options
Diffstat (limited to 'static/usage.html')
| -rw-r--r-- | static/usage.html | 20 |
1 files changed, 20 insertions, 0 deletions
diff --git a/static/usage.html b/static/usage.html index da0971c1..005b1bac 100644 --- a/static/usage.html +++ b/static/usage.html @@ -205,6 +205,26 @@ </section> </section> + <section id="usb-peripherals"> + <h2><a href="#usb-peripherals">USB peripherals</a></h2> + + <p>GrapheneOS defaults to ignoring connected USB peripherals when the device is + already booted and the screen is locked. A USB device already connected at boot + will still work. The purpose is reducing attack surface for a locked device with + active login sessions to user profiles to protect data that's not at rest. This + can be controlled in Settings ➔ Security ➔ USB accessories. The options are:</p> + + <ul> + <li>Disallow new USB peripherals</li> + <li>Allow new USB peripherals when unlocked (default)</li> + <li>Allow new USB peripherals (like stock Android)</li> + </ul> + + <p>This option has no impact on the device acting as a USB peripheral itself when + connected to a computer. Android defaults to charge only mode and requires opt-in + opt-in to the device being used for file transfer, USB tethering, MIDI or PTP.</p> + </section> + <section id="web-browsing"> <h2><a href="#web-browsing">Web browsing</a></h2> |