extras/udev-acl/70-udev-acl.rules

   1 # do not edit this file, it will be overwritten on update
   2
   3 # Do not use TAG+="udev-acl" outside of this file. This variable is private to
   4 # udev-acl of this udev release and may be replaced at any time.
   5
   6 ENV{MAJOR}=="", GOTO="acl_end"
   7 ACTION=="remove", GOTO="acl_apply"
   8
   9 # systemd replaces udev-acl entirely, skip if active
  10 TEST=="/sys/fs/cgroup/systemd", TAG=="uaccess", GOTO="acl_end"
  11
  12 # PTP/MTP protocol devices, cameras, portable media players
  13 SUBSYSTEM=="usb", ENV{ID_USB_INTERFACES}=="*:060101:*", TAG+="udev-acl"
  14
  15 # digicams with proprietary protocol
  16 ENV{ID_GPHOTO2}=="*?", TAG+="udev-acl"
  17
  18 # SCSI and USB scanners
  19 ENV{libsane_matched}=="yes", TAG+="udev-acl"
  20
  21 # HPLIP devices (necessary for ink level check and HP tool maintenance)
  22 ENV{ID_HPLIP}=="1", TAG+="udev-acl"
  23
  24 # optical drives
  25 SUBSYSTEM=="block", ENV{ID_CDROM}=="1", TAG+="udev-acl"
  26 SUBSYSTEM=="scsi_generic", SUBSYSTEMS=="scsi", ATTRS{type}=="4|5", TAG+="udev-acl"
  27
  28 # sound devices
  29 SUBSYSTEM=="sound", TAG+="udev-acl"
  30
  31 # ffado is an userspace driver for firewire sound cards
  32 SUBSYSTEM=="firewire", ENV{ID_FFADO}=="1", TAG+="udev-acl"
  33
  34 # webcams, frame grabber, TV cards
  35 SUBSYSTEM=="video4linux", TAG+="udev-acl"
  36 SUBSYSTEM=="dvb", TAG+="udev-acl"
  37
  38 # IIDC devices: industrial cameras and some webcams
  39 SUBSYSTEM=="firewire", ATTR{units}=="*0x00a02d:0x00010*",  TAG+="udev-acl"
  40 SUBSYSTEM=="firewire", ATTR{units}=="*0x00b09d:0x00010*",  TAG+="udev-acl"
  41 # AV/C devices: camcorders, set-top boxes, TV sets, audio devices, and more
  42 SUBSYSTEM=="firewire", ATTR{units}=="*0x00a02d:0x010001*", TAG+="udev-acl"
  43 SUBSYSTEM=="firewire", ATTR{units}=="*0x00a02d:0x014001*", TAG+="udev-acl"
  44
  45 # DRI video devices
  46 SUBSYSTEM=="drm", KERNEL=="card*", TAG+="udev-acl"
  47
  48 # KVM
  49 SUBSYSTEM=="misc", KERNEL=="kvm", TAG+="udev-acl"
  50
  51 # smart-card readers
  52 ENV{ID_SMARTCARD_READER}=="*?", TAG+="udev-acl"
  53
  54 # PDA devices
  55 ENV{ID_PDA}=="*?", TAG+="udev-acl"
  56
  57 # Programmable remote control
  58 ENV{ID_REMOTE_CONTROL}=="1", TAG+="udev-acl"
  59
  60 # joysticks
  61 SUBSYSTEM=="input", ENV{ID_INPUT_JOYSTICK}=="?*", TAG+="udev-acl"
  62
  63 # color measurement devices
  64 ENV{COLOR_MEASUREMENT_DEVICE}=="*?", TAG+="udev-acl"
  65
  66 # DDC/CI device, usually high-end monitors such as the DreamColor
  67 ENV{DDC_DEVICE}=="*?", TAG+="udev-acl"
  68
  69 # media player raw devices (for user-mode drivers, Android SDK, etc.)
  70 SUBSYSTEM=="usb", ENV{ID_MEDIA_PLAYER}=="?*", TAG+="udev-acl"
  71
  72 # apply ACL for all locally logged in users
  73 LABEL="acl_apply", TAG=="udev-acl", TEST=="/var/run/ConsoleKit/database", \
  74   RUN+="udev-acl --action=$env{ACTION} --device=$env{DEVNAME}"
  75
  76 LABEL="acl_end"