{"id":29776031,"url":"https://github.com/gicmo/bolt","last_synced_at":"2025-07-27T09:46:21.378Z","repository":{"id":26917401,"uuid":"98116503","full_name":"gicmo/bolt","owner":"gicmo","description":"⚡🐧 - Thunderbolt 3 device manager | This is a MIRROR of bolt from fd.o","archived":false,"fork":false,"pushed_at":"2022-12-16T12:23:19.000Z","size":2353,"stargazers_count":130,"open_issues_count":25,"forks_count":7,"subscribers_count":14,"default_branch":"master","last_synced_at":"2023-11-07T15:22:34.586Z","etag":null,"topics":["daemon","linux","security","thunderbolt"],"latest_commit_sha":null,"homepage":"https://gitlab.freedesktop.org/bolt/bolt","language":"C","has_issues":false,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"lgpl-2.1","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/gicmo.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":null,"funding":null,"license":"COPYING","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2017-07-23T18:14:08.000Z","updated_at":"2023-09-27T07:47:51.000Z","dependencies_parsed_at":"2023-01-14T05:36:34.087Z","dependency_job_id":null,"html_url":"https://github.com/gicmo/bolt","commit_stats":null,"previous_names":[],"tags_count":9,"template":null,"template_full_name":null,"purl":"pkg:github/gicmo/bolt","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/gicmo%2Fbolt","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/gicmo%2Fbolt/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/gicmo%2Fbolt/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/gicmo%2Fbolt/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/gicmo","download_url":"https://codeload.github.com/gicmo/bolt/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/gicmo%2Fbolt/sbom","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":267340687,"owners_count":24071566,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-07-27T02:00:11.917Z","response_time":82,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["daemon","linux","security","thunderbolt"],"created_at":"2025-07-27T09:46:13.059Z","updated_at":"2025-07-27T09:46:21.373Z","avatar_url":"https://github.com/gicmo.png","language":"C","funding_links":[],"categories":[],"sub_categories":[],"readme":"bolt\n====\n\nUserspace system daemon to enable security levels for *Thunderbolt™*\non GNU/Linux®.\n\nIntroduction\n------------\n\nThunderbolt™ is the brand name of a hardware interface developed by\nIntel® that allows the connection of external peripherals to a\ncomputer.\n\nDevices connected via Thunderbolt can be DMA masters and thus read\nsystem memory without interference of the operating system (or even\nthe CPU). Version 3 of the interface introduced 5 different security\nlevels, in order to mitigate the aforementioned security risk that\nconnected devices pose to the system. The security level is set by the\nsystem firmware.\n\nThe five security levels are:\n\n * `none`:    Security disabled, all devices will fully functional\n              on connect.\n * `dponly`:  Only pass the display-port stream through to the\n              connected device.\n * `user`:    Connected devices need to be manually authorized by\n              the user.\n * `secure`:  As 'user', but also challenge the device with a secret\n              key to verify its identity.\n * `usbonly`: One PCIe tunnel is created to a usb controller in a\n              thunderbolt dock; no other downstream PCIe tunnels are\n              authorized (needs 4.17 kernel and recent hardware).\n\nThe Linux kernel, starting with version 4.13, provides an interface via\nsysfs that enables userspace query the security level, the status of\nconnected devices and, most importantly, to authorize devices, if the\nsecurity level demands it.\n\nboltd - the system daemon\n-------------------------\n\nThe core of bolt is a system daemon (`boltd`) that interfaces with\nsysfs and exposes devices via D-Bus to clients. It also has a database\nof previously authorized devices (and their keys) and will, depending\non the policy set for the individual devices, automatically authorize\nnewly connected devices without user interaction. The daemon supports\nsyncing the devices database with the pre-boot access control list\nfirmware feature. It also adapts its behavior when iommu support is\ndetected.\n\nboltctl - command line client\n-----------------------------\nThe `boltctl` command line can be used to manage thunderbolt devices\nvia `boltd`.  It can list devices, monitor changes and initiate\nauthorization of devices.\n\n\nInstallation\n============\n\nThe [meson][meson] build system is used to configure and compile bolt.\n\n\n    meson build           # configure bolt, use build as buildir\n    ninja -C build        # compile it\n    ninja -C build test   # run the tests\n\nSee [INSTALL][install] for more information, [BUGS][bugs] for how to\nfile issues and [HACKING][hacking] how to contribute.\n\n\n[meson]: http://mesonbuild.com/\n[install]: INSTALL.md\n[bugs]: BUGS.md\n[hacking]: HACKING.md\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fgicmo%2Fbolt","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fgicmo%2Fbolt","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fgicmo%2Fbolt/lists"}