function f_usbguard {
  echo "[$SCRIPT_COUNT] Enable usbguard"

  $APT install --no-install-recommends usbguard

  usbguard generate-policy > /tmp/rules.conf
  install -m 0600 -o root -g root /tmp/rules.conf /etc/usbguard/rules.conf

  systemctl enable usbguard.service
  systemctl start usbguard.service

  if [[ $VERBOSE == "Y" ]]; then
    systemctl status usbguard.service --no-pager
    echo
  fi

  ((SCRIPT_COUNT++))
}