From 3dac70a1ddd017e98c4b7c0597cc80b484ac5e0b Mon Sep 17 00:00:00 2001
From: Daniel Micay <danielmicay@gmail.com>
Date: Sat, 6 Mar 2021 16:30:21 -0500
Subject: [PATCH] add back USB peripherals section

---
 static/usage.html | 20 ++++++++++++++++++++
 1 file changed, 20 insertions(+)

diff --git a/static/usage.html b/static/usage.html
index da0971c1..005b1bac 100644
--- a/static/usage.html
+++ b/static/usage.html
@@ -205,6 +205,26 @@
                 </section>
             </section>
 
+            <section id="usb-peripherals">
+                <h2><a href="#usb-peripherals">USB peripherals</a></h2>
+
+                <p>GrapheneOS defaults to ignoring connected USB peripherals when the device is
+                already booted and the screen is locked. A USB device already connected at boot
+                will still work. The purpose is reducing attack surface for a locked device with
+                active login sessions to user profiles to protect data that's not at rest. This
+                can be controlled in Settings ➔ Security ➔ USB accessories. The options are:</p>
+
+                <ul>
+                    <li>Disallow new USB peripherals</li>
+                    <li>Allow new USB peripherals when unlocked (default)</li>
+                    <li>Allow new USB peripherals (like stock Android)</li>
+                </ul>
+
+                <p>This option has no impact on the device acting as a USB peripheral itself when
+                connected to a computer. Android defaults to charge only mode and requires opt-in
+                opt-in to the device being used for file transfer, USB tethering, MIDI or PTP.</p>
+            </section>
+
             <section id="web-browsing">
                 <h2><a href="#web-browsing">Web browsing</a></h2>