chiark / gitweb /
builtin: apply format string
[elogind.git] / udev / udev-rules.c
index 4d9fa70ae54fe4193884e2043fddf92398262abe..4226d0b4e0ea801439765db624131ffeb960cf00 100644 (file)
@@ -1,5 +1,5 @@
 /*
- * Copyright (C) 2003-2009 Kay Sievers <kay.sievers@vrfy.org>
+ * Copyright (C) 2003-2010 Kay Sievers <kay.sievers@vrfy.org>
  * Copyright (C) 2008 Alan Jenkins <alan-jenkins@tuffmail.co.uk>
  *
  * This program is free software: you can redistribute it and/or modify
@@ -19,6 +19,7 @@
 #include <stddef.h>
 #include <limits.h>
 #include <stdlib.h>
+#include <stdbool.h>
 #include <string.h>
 #include <stdio.h>
 #include <fcntl.h>
@@ -124,6 +125,7 @@ enum token_type {
        TK_M_DEVLINK,                   /* val */
        TK_M_NAME,                      /* val */
        TK_M_ENV,                       /* val, attr */
+       TK_M_TAG,                       /* val */
        TK_M_SUBSYSTEM,                 /* val */
        TK_M_DRIVER,                    /* val */
        TK_M_WAITFOR,                   /* val */
@@ -134,21 +136,25 @@ enum token_type {
        TK_M_SUBSYSTEMS,                /* val */
        TK_M_DRIVERS,                   /* val */
        TK_M_ATTRS,                     /* val, attr */
+       TK_M_TAGS,                      /* val */
        TK_M_PARENTS_MAX,
 
        TK_M_TEST,                      /* val, mode_t */
+       TK_M_EVENT_TIMEOUT,             /* int */
        TK_M_PROGRAM,                   /* val */
        TK_M_IMPORT_FILE,               /* val */
        TK_M_IMPORT_PROG,               /* val */
+       TK_M_IMPORT_BUILTIN,            /* val */
+       TK_M_IMPORT_DB,                 /* val */
+       TK_M_IMPORT_CMDLINE,            /* val */
        TK_M_IMPORT_PARENT,             /* val */
        TK_M_RESULT,                    /* val */
        TK_M_MAX,
 
-       TK_A_IGNORE_DEVICE,
        TK_A_STRING_ESCAPE_NONE,
        TK_A_STRING_ESCAPE_REPLACE,
+       TK_A_DB_PERSIST,
        TK_A_INOTIFY_WATCH,             /* int */
-       TK_A_NUM_FAKE_PART,             /* int */
        TK_A_DEVLINK_PRIO,              /* int */
        TK_A_OWNER,                     /* val */
        TK_A_GROUP,                     /* val */
@@ -156,15 +162,14 @@ enum token_type {
        TK_A_OWNER_ID,                  /* uid_t */
        TK_A_GROUP_ID,                  /* gid_t */
        TK_A_MODE_ID,                   /* mode_t */
+       TK_A_STATIC_NODE,               /* val */
        TK_A_ENV,                       /* val, attr */
+       TK_A_TAG,                       /* val */
        TK_A_NAME,                      /* val */
        TK_A_DEVLINK,                   /* val */
-       TK_A_EVENT_TIMEOUT,             /* int */
-       TK_A_IGNORE_REMOVE,
        TK_A_ATTR,                      /* val, attr */
        TK_A_RUN,                       /* val, bool */
        TK_A_GOTO,                      /* size_t */
-       TK_A_LAST_RULE,
 
        TK_END,
 };
@@ -172,10 +177,12 @@ enum token_type {
 /* we try to pack stuff in a way that we take only 12 bytes per token */
 struct token {
        union {
-               unsigned char type;             /* same as in rule and key */
+               unsigned char type;             /* same in rule and key */
                struct {
                        enum token_type type:8;
-                       unsigned int flags:8;
+                       bool can_set_name:1;
+                       bool has_static_node:1;
+                       unsigned int unused:6;
                        unsigned short token_count;
                        unsigned int label_off;
                        unsigned short filename_off;
@@ -190,15 +197,15 @@ struct token {
                        unsigned int value_off;
                        union {
                                unsigned int attr_off;
-                               int ignore_error;
+                               int devlink_unique;
                                unsigned int rule_goto;
                                mode_t  mode;
                                uid_t uid;
                                gid_t gid;
-                               int num_fake_part;
                                int devlink_prio;
                                int event_timeout;
                                int watch;
+                               enum udev_builtin_cmd builtin_cmd;
                        };
                } key;
        };
@@ -255,6 +262,7 @@ static const char *token_str(enum token_type type)
                [TK_M_DEVLINK] =                "M DEVLINK",
                [TK_M_NAME] =                   "M NAME",
                [TK_M_ENV] =                    "M ENV",
+               [TK_M_TAG] =                    "M TAG",
                [TK_M_SUBSYSTEM] =              "M SUBSYSTEM",
                [TK_M_DRIVER] =                 "M DRIVER",
                [TK_M_WAITFOR] =                "M WAITFOR",
@@ -265,37 +273,40 @@ static const char *token_str(enum token_type type)
                [TK_M_SUBSYSTEMS] =             "M SUBSYSTEMS",
                [TK_M_DRIVERS] =                "M DRIVERS",
                [TK_M_ATTRS] =                  "M ATTRS",
+               [TK_M_TAGS] =                   "M TAGS",
                [TK_M_PARENTS_MAX] =            "M PARENTS_MAX",
 
                [TK_M_TEST] =                   "M TEST",
+               [TK_M_EVENT_TIMEOUT] =          "M EVENT_TIMEOUT",
                [TK_M_PROGRAM] =                "M PROGRAM",
                [TK_M_IMPORT_FILE] =            "M IMPORT_FILE",
                [TK_M_IMPORT_PROG] =            "M IMPORT_PROG",
+               [TK_M_IMPORT_BUILTIN] =         "M IMPORT_BUILTIN",
+               [TK_M_IMPORT_DB] =              "M IMPORT_DB",
+               [TK_M_IMPORT_CMDLINE] =         "M IMPORT_CMDLINE",
                [TK_M_IMPORT_PARENT] =          "M IMPORT_PARENT",
                [TK_M_RESULT] =                 "M RESULT",
                [TK_M_MAX] =                    "M MAX",
 
-               [TK_A_IGNORE_DEVICE] =          "A IGNORE_DEVICE",
                [TK_A_STRING_ESCAPE_NONE] =     "A STRING_ESCAPE_NONE",
                [TK_A_STRING_ESCAPE_REPLACE] =  "A STRING_ESCAPE_REPLACE",
+               [TK_A_DB_PERSIST] =             "A DB_PERSIST",
                [TK_A_INOTIFY_WATCH] =          "A INOTIFY_WATCH",
-               [TK_A_NUM_FAKE_PART] =          "A NUM_FAKE_PART",
                [TK_A_DEVLINK_PRIO] =           "A DEVLINK_PRIO",
                [TK_A_OWNER] =                  "A OWNER",
                [TK_A_GROUP] =                  "A GROUP",
                [TK_A_MODE] =                   "A MODE",
                [TK_A_OWNER_ID] =               "A OWNER_ID",
                [TK_A_GROUP_ID] =               "A GROUP_ID",
+               [TK_A_STATIC_NODE] =            "A STATIC_NODE",
                [TK_A_MODE_ID] =                "A MODE_ID",
                [TK_A_ENV] =                    "A ENV",
+               [TK_A_TAG] =                    "A ENV",
                [TK_A_NAME] =                   "A NAME",
                [TK_A_DEVLINK] =                "A DEVLINK",
-               [TK_A_EVENT_TIMEOUT] =          "A EVENT_TIMEOUT",
-               [TK_A_IGNORE_REMOVE] =          "A IGNORE_REMOVE",
                [TK_A_ATTR] =                   "A ATTR",
                [TK_A_RUN] =                    "A RUN",
                [TK_A_GOTO] =                   "A GOTO",
-               [TK_A_LAST_RULE] =              "A LAST_RULE",
 
                [TK_END] =                      "END",
        };
@@ -318,11 +329,10 @@ static void dump_token(struct udev_rules *rules, struct token *token)
                        const char *tk_ptr = (char *)token;
                        unsigned int idx = (tk_ptr - tks_ptr) / sizeof(struct token);
 
-                       dbg(rules->udev, "* RULE %s:%u, token: %u, count: %u, label: '%s', flags: 0x%02x\n",
+                       dbg(rules->udev, "* RULE %s:%u, token: %u, count: %u, label: '%s'\n",
                            &rules->buf[token->rule.filename_off], token->rule.filename_line,
                            idx, token->rule.token_count,
-                           &rules->buf[token->rule.label_off],
-                           token->rule.flags);
+                           &rules->buf[token->rule.label_off]);
                        break;
                }
        case TK_M_ACTION:
@@ -336,9 +346,12 @@ static void dump_token(struct udev_rules *rules, struct token *token)
        case TK_M_KERNELS:
        case TK_M_SUBSYSTEMS:
        case TK_M_DRIVERS:
+       case TK_M_TAGS:
        case TK_M_PROGRAM:
        case TK_M_IMPORT_FILE:
        case TK_M_IMPORT_PROG:
+       case TK_M_IMPORT_DB:
+       case TK_M_IMPORT_CMDLINE:
        case TK_M_IMPORT_PARENT:
        case TK_M_RESULT:
        case TK_A_NAME:
@@ -350,6 +363,9 @@ static void dump_token(struct udev_rules *rules, struct token *token)
                dbg(rules->udev, "%s %s '%s'(%s)\n",
                    token_str(type), operation_str(op), value, string_glob_str(glob));
                break;
+       case TK_M_IMPORT_BUILTIN:
+               dbg(rules->udev, "%s %i '%s'\n", token_str(type), token->key.builtin_cmd, value);
+               break;
        case TK_M_ATTR:
        case TK_M_ATTRS:
        case TK_M_ENV:
@@ -358,11 +374,13 @@ static void dump_token(struct udev_rules *rules, struct token *token)
                dbg(rules->udev, "%s %s '%s' '%s'(%s)\n",
                    token_str(type), operation_str(op), attr, value, string_glob_str(glob));
                break;
-       case TK_A_IGNORE_DEVICE:
+       case TK_M_TAG:
+       case TK_A_TAG:
+               dbg(rules->udev, "%s %s '%s'\n", token_str(type), operation_str(op), value);
+               break;
        case TK_A_STRING_ESCAPE_NONE:
        case TK_A_STRING_ESCAPE_REPLACE:
-       case TK_A_LAST_RULE:
-       case TK_A_IGNORE_REMOVE:
+       case TK_A_DB_PERSIST:
                dbg(rules->udev, "%s\n", token_str(type));
                break;
        case TK_M_TEST:
@@ -372,11 +390,8 @@ static void dump_token(struct udev_rules *rules, struct token *token)
        case TK_A_INOTIFY_WATCH:
                dbg(rules->udev, "%s %u\n", token_str(type), token->key.watch);
                break;
-       case TK_A_NUM_FAKE_PART:
-               dbg(rules->udev, "%s %u\n", token_str(type), token->key.num_fake_part);
-               break;
        case TK_A_DEVLINK_PRIO:
-               dbg(rules->udev, "%s %s %u\n", token_str(type), operation_str(op), token->key.devlink_prio);
+               dbg(rules->udev, "%s %u\n", token_str(type), token->key.devlink_prio);
                break;
        case TK_A_OWNER_ID:
                dbg(rules->udev, "%s %s %u\n", token_str(type), operation_str(op), token->key.uid);
@@ -387,8 +402,11 @@ static void dump_token(struct udev_rules *rules, struct token *token)
        case TK_A_MODE_ID:
                dbg(rules->udev, "%s %s %#o\n", token_str(type), operation_str(op), token->key.mode);
                break;
-       case TK_A_EVENT_TIMEOUT:
-               dbg(rules->udev, "%s %s %u\n", token_str(type), operation_str(op), token->key.event_timeout);
+       case TK_A_STATIC_NODE:
+               dbg(rules->udev, "%s '%s'\n", token_str(type), value);
+               break;
+       case TK_M_EVENT_TIMEOUT:
+               dbg(rules->udev, "%s %u\n", token_str(type), token->key.event_timeout);
                break;
        case TK_A_GOTO:
                dbg(rules->udev, "%s '%s' %u\n", token_str(type), value, token->key.rule_goto);
@@ -721,7 +739,7 @@ static int import_property_from_string(struct udev_device *dev, char *line)
                entry = udev_device_add_property(dev, key, val);
                /* store in db, skip private keys */
                if (key[0] != '.')
-                       udev_list_entry_set_flag(entry, 1);
+                       udev_list_entry_set_num(entry, true);
        }
        return 0;
 }
@@ -740,17 +758,18 @@ static int import_file_into_properties(struct udev_device *dev, const char *file
        return 0;
 }
 
-static int import_program_into_properties(struct udev_device *dev, const char *program)
+static int import_program_into_properties(struct udev_event *event, const char *program, const sigset_t *sigmask)
 {
-       struct udev *udev = udev_device_get_udev(dev);
+       struct udev_device *dev = event->dev;
        char **envp;
-       char result[4096];
-       size_t reslen;
+       char result[UTIL_LINE_SIZE];
        char *line;
+       int err;
 
        envp = udev_device_get_properties_envp(dev);
-       if (util_run_program(udev, program, envp, result, sizeof(result), &reslen) != 0)
-               return -1;
+       err = udev_event_spawn(event, program, envp, sigmask, result, sizeof(result));
+       if (err < 0)
+               return err;
 
        line = result;
        while (line != NULL) {
@@ -789,7 +808,7 @@ static int import_parent_into_properties(struct udev_device *dev, const char *fi
                        entry = udev_device_add_property(dev, key, val);
                        /* store in db, skip private keys */
                        if (key[0] != '.')
-                               udev_list_entry_set_flag(entry, 1);
+                               udev_list_entry_set_num(entry, true);
                }
        }
        return 0;
@@ -836,7 +855,7 @@ static int wait_for_file(struct udev_device *dev, const char *file, int timeout)
 
 static int attr_subst_subdir(char *attr, size_t len)
 {
-       int found = 0;
+       bool found = false;
 
        if (strstr(attr, "/*/")) {
                char *pos;
@@ -861,7 +880,7 @@ static int attr_subst_subdir(char *attr, size_t len)
                                        continue;
                                util_strscpyl(attr, len, dirname, "/", dent->d_name, tail, NULL);
                                if (stat(attr, &stats) == 0) {
-                                       found = 1;
+                                       found = true;
                                        break;
                                }
                        }
@@ -890,7 +909,7 @@ static int get_key(struct udev *udev, char **line, char **key, enum operation_ty
                return -1;
        *key = linepos;
 
-       while (1) {
+       for (;;) {
                linepos++;
                if (linepos[0] == '\0')
                        return -1;
@@ -1002,18 +1021,26 @@ static int rule_add_key(struct rule_tmp *rule_tmp, enum token_type type,
        case TK_M_KERNELS:
        case TK_M_SUBSYSTEMS:
        case TK_M_DRIVERS:
+       case TK_M_TAGS:
        case TK_M_PROGRAM:
        case TK_M_IMPORT_FILE:
        case TK_M_IMPORT_PROG:
+       case TK_M_IMPORT_DB:
+       case TK_M_IMPORT_CMDLINE:
        case TK_M_IMPORT_PARENT:
        case TK_M_RESULT:
        case TK_A_OWNER:
        case TK_A_GROUP:
        case TK_A_MODE:
        case TK_A_NAME:
-       case TK_A_DEVLINK:
        case TK_A_GOTO:
+       case TK_M_TAG:
+       case TK_A_TAG:
+               token->key.value_off = add_string(rule_tmp->rules, value);
+               break;
+       case TK_M_IMPORT_BUILTIN:
                token->key.value_off = add_string(rule_tmp->rules, value);
+               token->key.builtin_cmd = *(enum udev_builtin_cmd *)data;
                break;
        case TK_M_ENV:
        case TK_M_ATTR:
@@ -1024,23 +1051,23 @@ static int rule_add_key(struct rule_tmp *rule_tmp, enum token_type type,
                token->key.value_off = add_string(rule_tmp->rules, value);
                token->key.attr_off = add_string(rule_tmp->rules, attr);
                break;
+       case TK_A_DEVLINK:
+               token->key.value_off = add_string(rule_tmp->rules, value);
+               token->key.devlink_unique = *(int *)data;
+               break;
        case TK_M_TEST:
                token->key.value_off = add_string(rule_tmp->rules, value);
                if (data != NULL)
                        token->key.mode = *(mode_t *)data;
                break;
-       case TK_A_IGNORE_DEVICE:
        case TK_A_STRING_ESCAPE_NONE:
        case TK_A_STRING_ESCAPE_REPLACE:
-       case TK_A_IGNORE_REMOVE:
-       case TK_A_LAST_RULE:
+       case TK_A_DB_PERSIST:
                break;
        case TK_A_RUN:
                token->key.value_off = add_string(rule_tmp->rules, value);
-               token->key.ignore_error = *(int *)data;
                break;
        case TK_A_INOTIFY_WATCH:
-       case TK_A_NUM_FAKE_PART:
        case TK_A_DEVLINK_PRIO:
                token->key.devlink_prio = *(int *)data;
                break;
@@ -1053,7 +1080,10 @@ static int rule_add_key(struct rule_tmp *rule_tmp, enum token_type type,
        case TK_A_MODE_ID:
                token->key.mode = *(mode_t *)data;
                break;
-       case TK_A_EVENT_TIMEOUT:
+       case TK_A_STATIC_NODE:
+               token->key.value_off = add_string(rule_tmp->rules, value);
+               break;
+       case TK_M_EVENT_TIMEOUT:
                token->key.event_timeout = *(int *)data;
                break;
        case TK_RULE:
@@ -1127,7 +1157,7 @@ static int sort_token(struct udev_rules *rules, struct rule_tmp *rule_tmp)
 
        for (i = 0; i < rule_tmp->token_cur; i++) {
                enum token_type next_val = TK_UNSET;
-               unsigned int next_idx;
+               unsigned int next_idx = 0;
                unsigned int j;
 
                /* find smallest value */
@@ -1168,7 +1198,7 @@ static int add_rule(struct udev_rules *rules, char *line,
        rule_tmp.rule.rule.filename_line = lineno;
 
        linepos = line;
-       while (1) {
+       for (;;) {
                char *key;
                char *value;
                enum operation_type op;
@@ -1244,8 +1274,7 @@ static int add_rule(struct udev_rules *rules, char *line,
                        continue;
                }
 
-               if (strcmp(key, "KERNELS") == 0 ||
-                   strcmp(key, "ID") == 0) {
+               if (strcmp(key, "KERNELS") == 0) {
                        if (op > OP_MATCH_MAX) {
                                err(rules->udev, "invalid KERNELS operation\n");
                                goto invalid;
@@ -1254,8 +1283,7 @@ static int add_rule(struct udev_rules *rules, char *line,
                        continue;
                }
 
-               if (strcmp(key, "SUBSYSTEMS") == 0 ||
-                   strcmp(key, "BUS") == 0) {
+               if (strcmp(key, "SUBSYSTEMS") == 0) {
                        if (op > OP_MATCH_MAX) {
                                err(rules->udev, "invalid SUBSYSTEMS operation\n");
                                goto invalid;
@@ -1273,8 +1301,7 @@ static int add_rule(struct udev_rules *rules, char *line,
                        continue;
                }
 
-               if (strncmp(key, "ATTRS{", sizeof("ATTRS{")-1) == 0 ||
-                   strncmp(key, "SYSFS{", sizeof("SYSFS{")-1) == 0) {
+               if (strncmp(key, "ATTRS{", sizeof("ATTRS{")-1) == 0) {
                        if (op > OP_MATCH_MAX) {
                                err(rules->udev, "invalid ATTRS operation\n");
                                goto invalid;
@@ -1294,6 +1321,15 @@ static int add_rule(struct udev_rules *rules, char *line,
                        continue;
                }
 
+               if (strcmp(key, "TAGS") == 0) {
+                       if (op > OP_MATCH_MAX) {
+                               err(rules->udev, "invalid TAGS operation\n");
+                               goto invalid;
+                       }
+                       rule_add_key(&rule_tmp, TK_M_TAGS, op, value, NULL);
+                       continue;
+               }
+
                if (strncmp(key, "ENV{", sizeof("ENV{")-1) == 0) {
                        attr = get_key_attribute(rules->udev, key + sizeof("ENV")-1);
                        if (attr == NULL) {
@@ -1304,12 +1340,40 @@ static int add_rule(struct udev_rules *rules, char *line,
                                if (rule_add_key(&rule_tmp, TK_M_ENV, op, value, attr) != 0)
                                        goto invalid;
                        } else {
+                               static const char *blacklist[] = {
+                                       "ACTION",
+                                       "SUBSYSTEM",
+                                       "DEVTYPE",
+                                       "MAJOR",
+                                       "MINOR",
+                                       "DRIVER",
+                                       "IFINDEX",
+                                       "DEVNAME",
+                                       "DEVLINKS",
+                                       "DEVPATH",
+                                       "TAGS",
+                               };
+                               unsigned int i;
+
+                               for (i = 0; i < ARRAY_SIZE(blacklist); i++)
+                                       if (strcmp(attr, blacklist[i]) == 0) {
+                                               err(rules->udev, "invalid ENV attribute, '%s' can not be set %s:%u\n", attr, filename, lineno);
+                                               continue;
+                                       }
                                if (rule_add_key(&rule_tmp, TK_A_ENV, op, value, attr) != 0)
                                        goto invalid;
                        }
                        continue;
                }
 
+               if (strcmp(key, "TAG") == 0) {
+                       if (op < OP_MATCH_MAX)
+                               rule_add_key(&rule_tmp, TK_M_TAG, op, value, NULL);
+                       else
+                               rule_add_key(&rule_tmp, TK_A_TAG, op, value, NULL);
+                       continue;
+               }
+
                if (strcmp(key, "PROGRAM") == 0) {
                        rule_add_key(&rule_tmp, TK_M_PROGRAM, op, value, NULL);
                        continue;
@@ -1326,37 +1390,45 @@ static int add_rule(struct udev_rules *rules, char *line,
 
                if (strncmp(key, "IMPORT", sizeof("IMPORT")-1) == 0) {
                        attr = get_key_attribute(rules->udev, key + sizeof("IMPORT")-1);
-                       if (attr != NULL && strstr(attr, "program")) {
+                       if (attr == NULL) {
+                               err(rules->udev, "IMPORT{} type missing, ignoring IMPORT %s:%u\n", filename, lineno);
+                               continue;
+                       }
+                       if (strstr(attr, "program")) {
+                               /* find known built-in command */
+                               if (value[0] != '/') {
+                                       enum udev_builtin_cmd cmd;
+
+                                       cmd = udev_builtin_lookup(value);
+                                       if (cmd < UDEV_BUILTIN_MAX) {
+                                               info(rules->udev, "IMPORT found builtin '%s', replacing %s:%u\n",
+                                                    value, filename, lineno);
+                                               rule_add_key(&rule_tmp, TK_M_IMPORT_BUILTIN, op, value, &cmd);
+                                               continue;
+                                       }
+                               }
                                dbg(rules->udev, "IMPORT will be executed\n");
                                rule_add_key(&rule_tmp, TK_M_IMPORT_PROG, op, value, NULL);
-                       } else if (attr != NULL && strstr(attr, "file")) {
+                       } else if (strstr(attr, "builtin")) {
+                               enum udev_builtin_cmd cmd = udev_builtin_lookup(value);
+
+                               dbg(rules->udev, "IMPORT execute builtin\n");
+                               if (cmd < UDEV_BUILTIN_MAX)
+                                       rule_add_key(&rule_tmp, TK_M_IMPORT_BUILTIN, op, value, &cmd);
+                               else
+                                       err(rules->udev, "IMPORT{builtin}: '%s' unknown %s:%u\n", value, filename, lineno);
+                       } else if (strstr(attr, "file")) {
                                dbg(rules->udev, "IMPORT will be included as file\n");
                                rule_add_key(&rule_tmp, TK_M_IMPORT_FILE, op, value, NULL);
-                       } else if (attr != NULL && strstr(attr, "parent")) {
+                       } else if (strstr(attr, "db")) {
+                               dbg(rules->udev, "IMPORT will include db values\n");
+                               rule_add_key(&rule_tmp, TK_M_IMPORT_DB, op, value, NULL);
+                       } else if (strstr(attr, "cmdline")) {
+                               dbg(rules->udev, "IMPORT will include db values\n");
+                               rule_add_key(&rule_tmp, TK_M_IMPORT_CMDLINE, op, value, NULL);
+                       } else if (strstr(attr, "parent")) {
                                dbg(rules->udev, "IMPORT will include the parent values\n");
                                rule_add_key(&rule_tmp, TK_M_IMPORT_PARENT, op, value, NULL);
-                       } else {
-                               /* figure it out if it is executable */
-                               char file[UTIL_PATH_SIZE];
-                               char *pos;
-                               struct stat statbuf;
-
-                               /* allow programs in /lib/udev called without the path */
-                               if (value[0] != '/')
-                                       util_strscpyl(file, sizeof(file), LIBEXECDIR "/", value, NULL);
-                               else
-                                       util_strscpy(file, sizeof(file), value);
-                               pos = strchr(file, ' ');
-                               if (pos)
-                                       pos[0] = '\0';
-                               dbg(rules->udev, "IMPORT auto mode for '%s'\n", file);
-                               if (stat(file, &statbuf) == 0 && (statbuf.st_mode & S_IXUSR)) {
-                                       dbg(rules->udev, "IMPORT will be executed (autotype)\n");
-                                       rule_add_key(&rule_tmp, TK_M_IMPORT_PROG, op, value, NULL);
-                               } else {
-                                       dbg(rules->udev, "IMPORT will be included as file (autotype)\n");
-                                       rule_add_key(&rule_tmp, TK_M_IMPORT_FILE, op, value, NULL);
-                               }
                        }
                        continue;
                }
@@ -1378,13 +1450,8 @@ static int add_rule(struct udev_rules *rules, char *line,
                        continue;
                }
 
-               if (strncmp(key, "RUN", sizeof("RUN")-1) == 0) {
-                       int flag = 0;
-
-                       attr = get_key_attribute(rules->udev, key + sizeof("RUN")-1);
-                       if (attr != NULL && strstr(attr, "fail_event_on_error"))
-                               flag = 1;
-                       rule_add_key(&rule_tmp, TK_A_RUN, op, value, &flag);
+               if (strcmp(key, "RUN") == 0) {
+                       rule_add_key(&rule_tmp, TK_A_RUN, op, value, NULL);
                        continue;
                }
 
@@ -1407,36 +1474,34 @@ static int add_rule(struct udev_rules *rules, char *line,
                        if (op < OP_MATCH_MAX) {
                                rule_add_key(&rule_tmp, TK_M_NAME, op, value, NULL);
                        } else {
-                               if (value[0] == '\0')
-                                       info(rules->udev, "name empty, node creation suppressed\n");
-                               else if (strcmp(value, "%k") == 0)
-                                       err(rules->udev, "NAME=\"%%k\" is superfluous and breaks "
-                                           "kernel supplied names, please remove it from %s:%u\n", filename, lineno);
-                               rule_add_key(&rule_tmp, TK_A_NAME, op, value, NULL);
-                               attr = get_key_attribute(rules->udev, key + sizeof("NAME")-1);
-                               if (attr != NULL) {
-                                       if (strstr(attr, "all_partitions") != NULL) {
-                                               int num = DEFAULT_FAKE_PARTITIONS_COUNT;
-
-                                               dbg(rules->udev, "creation of partition nodes requested\n");
-                                               rule_add_key(&rule_tmp, TK_A_NUM_FAKE_PART, 0, NULL, &num);
-                                       }
-                                       if (strstr(attr, "ignore_remove") != NULL) {
-                                               dbg(rules->udev, "remove event should be ignored\n");
-                                               rule_add_key(&rule_tmp, TK_A_IGNORE_REMOVE, 0, NULL, NULL);
-                                       }
+                               if (strcmp(value, "%k") == 0) {
+                                       err(rules->udev, "NAME=\"%%k\" is ignored, because it breaks kernel supplied names, "
+                                           "please remove it from %s:%u\n", filename, lineno);
+                                       continue;
                                }
+                               if (value[0] == '\0') {
+                                       info(rules->udev, "NAME=\"\" is ignored, because udev will not delete any device nodes, "
+                                            "please remove it from %s:%u\n", filename, lineno);
+                                       continue;
+                               }
+                               rule_add_key(&rule_tmp, TK_A_NAME, op, value, NULL);
                        }
-                       rule_tmp.rule.rule.flags = 1;
+                       rule_tmp.rule.rule.can_set_name = true;
                        continue;
                }
 
-               if (strcmp(key, "SYMLINK") == 0) {
-                       if (op < OP_MATCH_MAX)
+               if (strncmp(key, "SYMLINK", sizeof("SYMLINK")-1) == 0) {
+                       if (op < OP_MATCH_MAX) {
                                rule_add_key(&rule_tmp, TK_M_DEVLINK, op, value, NULL);
-                       else
-                               rule_add_key(&rule_tmp, TK_A_DEVLINK, op, value, NULL);
-                       rule_tmp.rule.rule.flags = 1;
+                       } else {
+                               int flag = 0;
+
+                               attr = get_key_attribute(rules->udev, key + sizeof("SYMLINK")-1);
+                               if (attr != NULL && strstr(attr, "unique") != NULL)
+                                       flag = 1;
+                               rule_add_key(&rule_tmp, TK_A_DEVLINK, op, value, &flag);
+                       }
+                       rule_tmp.rule.rule.can_set_name = true;
                        continue;
                }
 
@@ -1453,7 +1518,7 @@ static int add_rule(struct udev_rules *rules, char *line,
                        } else if (rules->resolve_names >= 0) {
                                rule_add_key(&rule_tmp, TK_A_OWNER, op, value, NULL);
                        }
-                       rule_tmp.rule.rule.flags = 1;
+                       rule_tmp.rule.rule.can_set_name = true;
                        continue;
                }
 
@@ -1470,7 +1535,7 @@ static int add_rule(struct udev_rules *rules, char *line,
                        } else if (rules->resolve_names >= 0) {
                                rule_add_key(&rule_tmp, TK_A_GROUP, op, value, NULL);
                        }
-                       rule_tmp.rule.rule.flags = 1;
+                       rule_tmp.rule.rule.can_set_name = true;
                        continue;
                }
 
@@ -1483,71 +1548,69 @@ static int add_rule(struct udev_rules *rules, char *line,
                                rule_add_key(&rule_tmp, TK_A_MODE_ID, op, NULL, &mode);
                        else
                                rule_add_key(&rule_tmp, TK_A_MODE, op, value, NULL);
-                       rule_tmp.rule.rule.flags = 1;
+                       rule_tmp.rule.rule.can_set_name = true;
                        continue;
                }
 
                if (strcmp(key, "OPTIONS") == 0) {
                        const char *pos;
 
-                       if (strstr(value, "last_rule") != NULL) {
-                               dbg(rules->udev, "last rule to be applied\n");
-                               rule_add_key(&rule_tmp, TK_A_LAST_RULE, 0, NULL, NULL);
-                       }
-                       if (strstr(value, "ignore_device") != NULL) {
-                               dbg(rules->udev, "device should be ignored\n");
-                               rule_add_key(&rule_tmp, TK_A_IGNORE_DEVICE, 0, NULL, NULL);
-                       }
-                       if (strstr(value, "ignore_remove") != NULL) {
-                               dbg(rules->udev, "remove event should be ignored\n");
-                               rule_add_key(&rule_tmp, TK_A_IGNORE_REMOVE, 0, NULL, NULL);
-                       }
                        pos = strstr(value, "link_priority=");
                        if (pos != NULL) {
                                int prio = atoi(&pos[strlen("link_priority=")]);
 
-                               rule_add_key(&rule_tmp, TK_A_DEVLINK_PRIO, 0, NULL, &prio);
+                               rule_add_key(&rule_tmp, TK_A_DEVLINK_PRIO, op, NULL, &prio);
                                dbg(rules->udev, "link priority=%i\n", prio);
                        }
+
                        pos = strstr(value, "event_timeout=");
                        if (pos != NULL) {
                                int tout = atoi(&pos[strlen("event_timeout=")]);
 
-                               rule_add_key(&rule_tmp, TK_A_EVENT_TIMEOUT, 0, NULL, &tout);
+                               rule_add_key(&rule_tmp, TK_M_EVENT_TIMEOUT, op, NULL, &tout);
                                dbg(rules->udev, "event timeout=%i\n", tout);
                        }
+
                        pos = strstr(value, "string_escape=");
                        if (pos != NULL) {
                                pos = &pos[strlen("string_escape=")];
                                if (strncmp(pos, "none", strlen("none")) == 0)
-                                       rule_add_key(&rule_tmp, TK_A_STRING_ESCAPE_NONE, 0, NULL, NULL);
+                                       rule_add_key(&rule_tmp, TK_A_STRING_ESCAPE_NONE, op, NULL, NULL);
                                else if (strncmp(pos, "replace", strlen("replace")) == 0)
-                                       rule_add_key(&rule_tmp, TK_A_STRING_ESCAPE_REPLACE, 0, NULL, NULL);
+                                       rule_add_key(&rule_tmp, TK_A_STRING_ESCAPE_REPLACE, op, NULL, NULL);
                        }
-                       if (strstr(value, "all_partitions") != NULL) {
-                               int num = DEFAULT_FAKE_PARTITIONS_COUNT;
 
-                               rule_add_key(&rule_tmp, TK_A_NUM_FAKE_PART, 0, NULL, &num);
-                               dbg(rules->udev, "creation of partition nodes requested\n");
-                       }
+                       pos = strstr(value, "db_persist");
+                       if (pos != NULL)
+                               rule_add_key(&rule_tmp, TK_A_DB_PERSIST, op, NULL, NULL);
+
                        pos = strstr(value, "nowatch");
                        if (pos != NULL) {
                                const int off = 0;
 
-                               rule_add_key(&rule_tmp, TK_A_INOTIFY_WATCH, 0, NULL, &off);
+                               rule_add_key(&rule_tmp, TK_A_INOTIFY_WATCH, op, NULL, &off);
                                dbg(rules->udev, "inotify watch of device disabled\n");
                        } else {
                                pos = strstr(value, "watch");
                                if (pos != NULL) {
                                        const int on = 1;
 
-                                       rule_add_key(&rule_tmp, TK_A_INOTIFY_WATCH, 0, NULL, &on);
+                                       rule_add_key(&rule_tmp, TK_A_INOTIFY_WATCH, op, NULL, &on);
                                        dbg(rules->udev, "inotify watch of device requested\n");
                                }
                        }
+
+                       pos = strstr(value, "static_node=");
+                       if (pos != NULL) {
+                               rule_add_key(&rule_tmp, TK_A_STATIC_NODE, op, &pos[strlen("static_node=")], NULL);
+                               rule_tmp.rule.rule.has_static_node = true;
+                       }
+
                        continue;
                }
+
                err(rules->udev, "unknown key '%s' in %s:%u\n", key, filename, lineno);
+               goto invalid;
        }
 
        /* add rule token */
@@ -1568,6 +1631,7 @@ invalid:
 static int parse_file(struct udev_rules *rules, const char *filename, unsigned short filename_off)
 {
        FILE *f;
+       unsigned int first_token;
        char line[UTIL_LINE_SIZE];
        int line_nr = 0;
        unsigned int i;
@@ -1577,6 +1641,9 @@ static int parse_file(struct udev_rules *rules, const char *filename, unsigned s
        f = fopen(filename, "r");
        if (f == NULL)
                return -1;
+
+       first_token = rules->token_cur;
+
        while (fgets(line, sizeof(line), f) != NULL) {
                char *key;
                size_t len;
@@ -1599,6 +1666,8 @@ static int parse_file(struct udev_rules *rules, const char *filename, unsigned s
                while (line[len-2] == '\\') {
                        if (fgets(&line[len-2], (sizeof(line)-len)+2, f) == NULL)
                                break;
+                       if (strlen(&line[len-2]) < 2)
+                               break;
                        line_nr++;
                        len = strlen(line);
                }
@@ -1612,7 +1681,7 @@ static int parse_file(struct udev_rules *rules, const char *filename, unsigned s
        fclose(f);
 
        /* link GOTOs to LABEL rules in this file to be able to fast-forward */
-       for (i = rules->token_cur+1; i < rules->token_cur; i++) {
+       for (i = first_token+1; i < rules->token_cur; i++) {
                if (rules->tokens[i].type == TK_A_GOTO) {
                        char *label = &rules->buf[rules->tokens[i].key.value_off];
                        unsigned int j;
@@ -1634,9 +1703,10 @@ static int parse_file(struct udev_rules *rules, const char *filename, unsigned s
        return 0;
 }
 
-static int add_matching_files(struct udev *udev, struct udev_list_node *file_list, const char *dirname, const char *suffix)
+static int add_matching_files(struct udev *udev, struct udev_list *file_list, const char *dirname, const char *suffix)
 {
        DIR *dir;
+       struct dirent *dent;
        char filename[UTIL_PATH_SIZE];
 
        dbg(udev, "open directory '%s'\n", dirname);
@@ -1646,13 +1716,7 @@ static int add_matching_files(struct udev *udev, struct udev_list_node *file_lis
                return -1;
        }
 
-       while (1) {
-               struct dirent *dent;
-
-               dent = readdir(dir);
-               if (dent == NULL || dent->d_name[0] == '\0')
-                       break;
-
+       for (dent = readdir(dir); dent != NULL; dent = readdir(dir)) {
                if (dent->d_name[0] == '.')
                        continue;
 
@@ -1668,7 +1732,12 @@ static int add_matching_files(struct udev *udev, struct udev_list_node *file_lis
                }
                util_strscpyl(filename, sizeof(filename), dirname, "/", dent->d_name, NULL);
                dbg(udev, "put file '%s' into list\n", filename);
-               udev_list_entry_add(udev, file_list, filename, NULL, 1, 1);
+               /*
+                * the basename is the key, the filename the value
+                * identical basenames from different directories overwrite each other
+                * entries are sorted after basename
+                */
+               udev_list_entry_add(file_list, dent->d_name, filename);
        }
 
        closedir(dir);
@@ -1678,28 +1747,31 @@ static int add_matching_files(struct udev *udev, struct udev_list_node *file_lis
 struct udev_rules *udev_rules_new(struct udev *udev, int resolve_names)
 {
        struct udev_rules *rules;
-       struct stat statbuf;
-       struct udev_list_node file_list;
-       struct udev_list_entry *file_loop, *file_tmp;
+       struct udev_list file_list;
+       struct udev_list_entry *file_loop;
        struct token end_token;
 
-       rules = malloc(sizeof(struct udev_rules));
+       rules = calloc(1, sizeof(struct udev_rules));
        if (rules == NULL)
                return NULL;
-       memset(rules, 0x00, sizeof(struct udev_rules));
        rules->udev = udev;
        rules->resolve_names = resolve_names;
-       udev_list_init(&file_list);
+       udev_list_init(udev, &file_list, true);
 
        /* init token array and string buffer */
        rules->tokens = malloc(PREALLOC_TOKEN * sizeof(struct token));
-       if (rules->tokens == NULL)
+       if (rules->tokens == NULL) {
+               free(rules);
                return NULL;
+       }
        rules->token_max = PREALLOC_TOKEN;
 
        rules->buf = malloc(PREALLOC_STRBUF);
-       if (rules->buf == NULL)
+       if (rules->buf == NULL) {
+               free(rules->tokens);
+               free(rules);
                return NULL;
+       }
        rules->buf_max = PREALLOC_STRBUF;
        /* offset 0 is always '\0' */
        rules->buf[0] = '\0';
@@ -1708,98 +1780,66 @@ struct udev_rules *udev_rules_new(struct udev *udev, int resolve_names)
            rules->token_max * sizeof(struct token), rules->token_max, sizeof(struct token), rules->buf_max);
 
        rules->trie_nodes = malloc(PREALLOC_TRIE * sizeof(struct trie_node));
-       if (rules->trie_nodes == NULL)
+       if (rules->trie_nodes == NULL) {
+               free(rules->buf);
+               free(rules->tokens);
+               free(rules);
                return NULL;
+       }
        rules->trie_nodes_max = PREALLOC_TRIE;
        /* offset 0 is the trie root, with an empty string */
        memset(rules->trie_nodes, 0x00, sizeof(struct trie_node));
        rules->trie_nodes_cur = 1;
 
-       if (udev_get_rules_path(udev) != NULL) {
-               /* custom rules location for testing */
-               add_matching_files(udev, &file_list, udev_get_rules_path(udev), ".rules");
-       } else {
-               char filename[PATH_MAX];
-               struct udev_list_node sort_list;
-               struct udev_list_entry *sort_loop, *sort_tmp;
-
-               /* read user/custom rules */
-               add_matching_files(udev, &file_list, SYSCONFDIR "/udev/rules.d", ".rules");
-
-               /* read dynamic/temporary rules */
-               util_strscpyl(filename, sizeof(filename), udev_get_dev_path(udev), "/.udev/rules.d", NULL);
-               if (stat(filename, &statbuf) != 0) {
-                       util_create_path(udev, filename);
-                       udev_selinux_setfscreatecon(udev, filename, S_IFDIR|0755);
-                       mkdir(filename, 0755);
-                       udev_selinux_resetfscreatecon(udev);
-               }
-               udev_list_init(&sort_list);
-               add_matching_files(udev, &sort_list, filename, ".rules");
-
-               /* read default rules */
-               add_matching_files(udev, &sort_list, LIBEXECDIR "/rules.d", ".rules");
+       if (udev_get_rules_path(udev) == NULL) {
+               char filename[UTIL_PATH_SIZE];
 
-               /* sort all rules files by basename into list of files */
-               udev_list_entry_foreach_safe(sort_loop, sort_tmp, udev_list_get_entry(&sort_list)) {
-                       const char *sort_name = udev_list_entry_get_name(sort_loop);
-                       const char *sort_base = strrchr(sort_name, '/');
+               /* /usr/lib/udev -- system rules */
+               add_matching_files(udev, &file_list, LIBEXECDIR "/rules.d", ".rules");
 
-                       if (sort_base == NULL)
-                               continue;
-                       /* sort entry into existing list */
-                       udev_list_entry_foreach_safe(file_loop, file_tmp, udev_list_get_entry(&file_list)) {
-                               const char *file_name = udev_list_entry_get_name(file_loop);
-                               const char *file_base = strrchr(file_name, '/');
+               /* /etc/udev -- local administration rules */
+               add_matching_files(udev, &file_list, SYSCONFDIR "/udev/rules.d", ".rules");
 
-                               if (file_base == NULL)
-                                       continue;
-                               if (strcmp(file_base, sort_base) == 0) {
-                                       info(udev, "rule file basename '%s' already added, ignoring '%s'\n",
-                                            file_name, sort_name);
-                                       udev_list_entry_delete(sort_loop);
-                                       sort_loop = NULL;
-                                       break;
-                               }
-                               if (strcmp(file_base, sort_base) > 0) {
-                                       /* found later file, insert before */
-                                       udev_list_entry_remove(sort_loop);
-                                       udev_list_entry_insert_before(sort_loop, file_loop);
-                                       sort_loop = NULL;
-                                       break;
-                               }
-                       }
-                       /* current file already handled */
-                       if (sort_loop == NULL)
-                               continue;
-                       /* no later file, append to end of list */
-                       udev_list_entry_remove(sort_loop);
-                       udev_list_entry_append(sort_loop, &file_list);
-               }
+               /* /run/udev -- runtime rules */
+               util_strscpyl(filename, sizeof(filename), udev_get_run_path(udev), "/rules.d", NULL);
+               add_matching_files(udev, &file_list, filename, ".rules");
+       } else {
+               /* custom rules files location for testing */
+               add_matching_files(udev, &file_list, udev_get_rules_path(udev), ".rules");
        }
 
        /* add all filenames to the string buffer */
        udev_list_entry_foreach(file_loop, udev_list_get_entry(&file_list)) {
-               const char *filename = udev_list_entry_get_name(file_loop);
+               const char *filename = udev_list_entry_get_value(file_loop);
                unsigned int filename_off;
 
                filename_off = add_string(rules, filename);
                /* the offset in the rule is limited to unsigned short */
                if (filename_off < USHRT_MAX)
-                       udev_list_entry_set_flag(file_loop, filename_off);
+                       udev_list_entry_set_num(file_loop, filename_off);
        }
 
-       /* parse list of files */
-       udev_list_entry_foreach_safe(file_loop, file_tmp, udev_list_get_entry(&file_list)) {
-               const char *filename = udev_list_entry_get_name(file_loop);
-               unsigned int filename_off = udev_list_entry_get_flag(file_loop);
+       /* parse all rules files */
+       udev_list_entry_foreach(file_loop, udev_list_get_entry(&file_list)) {
+               const char *filename = udev_list_entry_get_value(file_loop);
+               unsigned int filename_off = udev_list_entry_get_num(file_loop);
+               struct stat st;
 
-               if (stat(filename, &statbuf) == 0 && statbuf.st_size > 0)
-                       parse_file(rules, filename, filename_off);
-               else
-                       err(udev, "can not read '%s'\n", filename);
-               udev_list_entry_delete(file_loop);
+               if (stat(filename, &st) != 0) {
+                       err(udev, "can not find '%s': %m\n", filename);
+                       continue;
+               }
+               if (S_ISREG(st.st_mode) && st.st_size <= 0) {
+                       info(udev, "ignore empty '%s'\n", filename);
+                       continue;
+               }
+               if (S_ISCHR(st.st_mode)) {
+                       info(udev, "ignore masked '%s'\n", filename);
+                       continue;
+               }
+               parse_file(rules, filename, filename_off);
        }
+       udev_list_cleanup(&file_list);
 
        memset(&end_token, 0x00, sizeof(struct token));
        end_token.type = TK_END;
@@ -1866,7 +1906,7 @@ static int match_key(struct udev_rules *rules, struct token *token, const char *
 {
        char *key_value = &rules->buf[token->key.value_off];
        char *pos;
-       int match = 0;
+       bool match = false;
 
        if (val == NULL)
                val = "";
@@ -1885,7 +1925,7 @@ static int match_key(struct udev_rules *rules, struct token *token, const char *
 
                        split = &rules->buf[token->key.value_off];
                        len = strlen(val);
-                       while (1) {
+                       for (;;) {
                                const char *next;
 
                                next = strchr(split, '|');
@@ -1998,32 +2038,31 @@ enum escape_type {
        ESCAPE_REPLACE,
 };
 
-int udev_rules_apply_to_event(struct udev_rules *rules, struct udev_event *event)
+int udev_rules_apply_to_event(struct udev_rules *rules, struct udev_event *event, const sigset_t *sigmask)
 {
        struct token *cur;
        struct token *rule;
        enum escape_type esc = ESCAPE_UNSET;
-       int can_set_name;
+       bool can_set_name;
 
        if (rules->tokens == NULL)
                return -1;
 
-       can_set_name = ((strcmp(udev_device_get_action(event->dev), "add") == 0 ||
-                        strcmp(udev_device_get_action(event->dev), "change") == 0) &&
+       can_set_name = ((strcmp(udev_device_get_action(event->dev), "remove") != 0) &&
                        (major(udev_device_get_devnum(event->dev)) > 0 ||
-                        strcmp(udev_device_get_subsystem(event->dev), "net") == 0));
+                        udev_device_get_ifindex(event->dev) > 0));
 
        /* loop through token list, match, run actions or forward to next rule */
        cur = &rules->tokens[0];
        rule = cur;
-       while (1) {
+       for (;;) {
                dump_token(rules, cur);
                switch (cur->type) {
                case TK_RULE:
                        /* current rule */
                        rule = cur;
                        /* possibly skip rules which want to set NAME, SYMLINK, OWNER, GROUP, MODE */
-                       if (!can_set_name && rule->rule.flags)
+                       if (!can_set_name && rule->rule.can_set_name)
                                goto nomatch;
                        esc = ESCAPE_UNSET;
                        break;
@@ -2039,43 +2078,55 @@ int udev_rules_apply_to_event(struct udev_rules *rules, struct udev_event *event
                        if (match_key(rules, cur, udev_device_get_sysname(event->dev)) != 0)
                                goto nomatch;
                        break;
-               case TK_M_DEVLINK:
-                       {
-                               size_t devlen = strlen(udev_get_dev_path(event->udev))+1;
-                               struct udev_list_entry *list_entry;
-                               int match = 0;
-
-                               udev_list_entry_foreach(list_entry, udev_device_get_devlinks_list_entry(event->dev)) {
-                                       const char *devlink;
-
-                                       devlink =  &udev_list_entry_get_name(list_entry)[devlen];
-                                       if (match_key(rules, cur, devlink) == 0) {
-                                               match = 1;
-                                               break;
-                                       }
+               case TK_M_DEVLINK: {
+                       size_t devlen = strlen(udev_get_dev_path(event->udev))+1;
+                       struct udev_list_entry *list_entry;
+                       bool match = false;
+
+                       udev_list_entry_foreach(list_entry, udev_device_get_devlinks_list_entry(event->dev)) {
+                               const char *devlink;
+
+                               devlink =  &udev_list_entry_get_name(list_entry)[devlen];
+                               if (match_key(rules, cur, devlink) == 0) {
+                                       match = true;
+                                       break;
                                }
-                               if (!match)
-                                       goto nomatch;
-                               break;
                        }
+                       if (!match)
+                               goto nomatch;
+                       break;
+               }
                case TK_M_NAME:
                        if (match_key(rules, cur, event->name) != 0)
                                goto nomatch;
                        break;
-               case TK_M_ENV:
-                       {
-                               const char *key_name = &rules->buf[cur->key.attr_off];
-                               const char *value;
-
-                               value = udev_device_get_property_value(event->dev, key_name);
-                               if (value == NULL) {
-                                       dbg(event->udev, "ENV{%s} is not set, treat as empty\n", key_name);
-                                       value = "";
+               case TK_M_ENV: {
+                       const char *key_name = &rules->buf[cur->key.attr_off];
+                       const char *value;
+
+                       value = udev_device_get_property_value(event->dev, key_name);
+                       if (value == NULL) {
+                               dbg(event->udev, "ENV{%s} is not set, treat as empty\n", key_name);
+                               value = "";
+                       }
+                       if (match_key(rules, cur, value))
+                               goto nomatch;
+                       break;
+               }
+               case TK_M_TAG: {
+                       struct udev_list_entry *list_entry;
+                       bool match = false;
+
+                       udev_list_entry_foreach(list_entry, udev_device_get_tags_list_entry(event->dev)) {
+                               if (strcmp(&rules->buf[cur->key.value_off], udev_list_entry_get_name(list_entry)) == 0) {
+                                       match = true;
+                                       break;
                                }
-                               if (match_key(rules, cur, value))
-                                       goto nomatch;
-                               break;
                        }
+                       if (!match && (cur->key.op != OP_NOMATCH))
+                               goto nomatch;
+                       break;
+               }
                case TK_M_SUBSYSTEM:
                        if (match_key(rules, cur, udev_device_get_subsystem(event->dev)) != 0)
                                goto nomatch;
@@ -2084,17 +2135,16 @@ int udev_rules_apply_to_event(struct udev_rules *rules, struct udev_event *event
                        if (match_key(rules, cur, udev_device_get_driver(event->dev)) != 0)
                                goto nomatch;
                        break;
-               case TK_M_WAITFOR:
-                       {
-                               char filename[UTIL_PATH_SIZE];
-                               int found;
-
-                               udev_event_apply_format(event, &rules->buf[cur->key.value_off], filename, sizeof(filename));
-                               found = (wait_for_file(event->dev, filename, 10) == 0);
-                               if (!found && (cur->key.op != OP_NOMATCH))
-                                       goto nomatch;
-                               break;
-                       }
+               case TK_M_WAITFOR: {
+                       char filename[UTIL_PATH_SIZE];
+                       int found;
+
+                       udev_event_apply_format(event, &rules->buf[cur->key.value_off], filename, sizeof(filename));
+                       found = (wait_for_file(event->dev, filename, 10) == 0);
+                       if (!found && (cur->key.op != OP_NOMATCH))
+                               goto nomatch;
+                       break;
+               }
                case TK_M_ATTR:
                        if (match_attr(rules, event->dev, event, cur) != 0)
                                goto nomatch;
@@ -2103,164 +2153,262 @@ int udev_rules_apply_to_event(struct udev_rules *rules, struct udev_event *event
                case TK_M_SUBSYSTEMS:
                case TK_M_DRIVERS:
                case TK_M_ATTRS:
-                       {
-                               struct token *next;
-
-                               /* get whole sequence of parent matches */
-                               next = cur;
-                               while (next->type > TK_M_PARENTS_MIN && next->type < TK_M_PARENTS_MAX)
-                                       next++;
+               case TK_M_TAGS: {
+                       struct token *next;
+
+                       /* get whole sequence of parent matches */
+                       next = cur;
+                       while (next->type > TK_M_PARENTS_MIN && next->type < TK_M_PARENTS_MAX)
+                               next++;
+
+                       /* loop over parents */
+                       event->dev_parent = event->dev;
+                       for (;;) {
+                               struct token *key;
+
+                               dbg(event->udev, "parent: '%s'\n", udev_device_get_syspath(event->dev_parent));
+                               /* loop over sequence of parent match keys */
+                               for (key = cur; key < next; key++ ) {
+                                       dump_token(rules, key);
+                                       switch(key->type) {
+                                       case TK_M_KERNELS:
+                                               if (match_key(rules, key, udev_device_get_sysname(event->dev_parent)) != 0)
+                                                       goto try_parent;
+                                               break;
+                                       case TK_M_SUBSYSTEMS:
+                                               if (match_key(rules, key, udev_device_get_subsystem(event->dev_parent)) != 0)
+                                                       goto try_parent;
+                                               break;
+                                       case TK_M_DRIVERS:
+                                               if (match_key(rules, key, udev_device_get_driver(event->dev_parent)) != 0)
+                                                       goto try_parent;
+                                               break;
+                                       case TK_M_ATTRS:
+                                               if (match_attr(rules, event->dev_parent, event, key) != 0)
+                                                       goto try_parent;
+                                               break;
+                                       case TK_M_TAGS: {
+                                               bool match = udev_device_has_tag(event->dev_parent, &rules->buf[cur->key.value_off]);
 
-                               /* loop over parents */
-                               event->dev_parent = event->dev;
-                               while (1) {
-                                       struct token *key;
-
-                                       dbg(event->udev, "parent: '%s'\n", udev_device_get_syspath(event->dev_parent));
-                                       /* loop over sequence of parent match keys */
-                                       for (key = cur; key < next; key++ ) {
-                                               dump_token(rules, key);
-                                               switch(key->type) {
-                                               case TK_M_KERNELS:
-                                                       if (match_key(rules, key, udev_device_get_sysname(event->dev_parent)) != 0)
-                                                               goto try_parent;
-                                                       break;
-                                               case TK_M_SUBSYSTEMS:
-                                                       if (match_key(rules, key, udev_device_get_subsystem(event->dev_parent)) != 0)
-                                                               goto try_parent;
-                                                       break;
-                                               case TK_M_DRIVERS:
-                                                       if (match_key(rules, key, udev_device_get_driver(event->dev_parent)) != 0)
-                                                               goto try_parent;
-                                                       break;
-                                               case TK_M_ATTRS:
-                                                       if (match_attr(rules, event->dev_parent, event, key) != 0)
-                                                               goto try_parent;
-                                                       break;
-                                               default:
-                                                       goto nomatch;
-                                               }
-                                               dbg(event->udev, "parent key matched\n");
+                                               if (match && key->key.op == OP_NOMATCH)
+                                                       goto try_parent;
+                                               if (!match && key->key.op == OP_MATCH)
+                                                       goto try_parent;
+                                               break;
                                        }
-                                       dbg(event->udev, "all parent keys matched\n");
-                                       /* all keys matched */
-                                       break;
-
-                               try_parent:
-                                       event->dev_parent = udev_device_get_parent(event->dev_parent);
-                                       if (event->dev_parent == NULL)
+                                       default:
                                                goto nomatch;
-                               }
-                               /* move behind our sequence of parent match keys */
-                               cur = next;
-                               continue;
-                       }
-               case TK_M_TEST:
-                       {
-                               char filename[UTIL_PATH_SIZE];
-                               struct stat statbuf;
-                               int match;
-
-                               udev_event_apply_format(event, &rules->buf[cur->key.value_off], filename, sizeof(filename));
-                               if (util_resolve_subsys_kernel(event->udev, filename, filename, sizeof(filename), 0) != 0) {
-                                       if (filename[0] != '/') {
-                                               char tmp[UTIL_PATH_SIZE];
-
-                                               util_strscpy(tmp, sizeof(tmp), filename);
-                                               util_strscpyl(filename, sizeof(filename),
-                                                             udev_device_get_syspath(event->dev), "/", tmp, NULL);
                                        }
+                                       dbg(event->udev, "parent key matched\n");
                                }
-                               attr_subst_subdir(filename, sizeof(filename));
-
-                               match = (stat(filename, &statbuf) == 0);
-                               dbg(event->udev, "'%s' %s", filename, match ? "exists\n" : "does not exist\n");
-                               if (match && cur->key.mode > 0) {
-                                       match = ((statbuf.st_mode & cur->key.mode) > 0);
-                                       dbg(event->udev, "'%s' has mode=%#o and %s %#o\n", filename, statbuf.st_mode,
-                                           match ? "matches" : "does not match", cur->key.mode);
-                               }
-                               if (match && cur->key.op == OP_NOMATCH)
-                                       goto nomatch;
-                               if (!match && cur->key.op == OP_MATCH)
-                                       goto nomatch;
+                               dbg(event->udev, "all parent keys matched\n");
                                break;
+
+                       try_parent:
+                               event->dev_parent = udev_device_get_parent(event->dev_parent);
+                               if (event->dev_parent == NULL)
+                                       goto nomatch;
                        }
-               case TK_M_PROGRAM:
-                       {
-                               char program[UTIL_PATH_SIZE];
-                               char **envp;
-                               char result[UTIL_PATH_SIZE];
-
-                               free(event->program_result);
-                               event->program_result = NULL;
-                               udev_event_apply_format(event, &rules->buf[cur->key.value_off], program, sizeof(program));
-                               envp = udev_device_get_properties_envp(event->dev);
-                               info(event->udev, "PROGRAM '%s' %s:%u\n",
-                                    program,
-                                    &rules->buf[rule->rule.filename_off],
-                                    rule->rule.filename_line);
-                               if (util_run_program(event->udev, program, envp, result, sizeof(result), NULL) != 0) {
-                                       if (cur->key.op != OP_NOMATCH)
-                                               goto nomatch;
-                               } else {
-                                       int count;
+                       /* move behind our sequence of parent match keys */
+                       cur = next;
+                       continue;
+               }
+               case TK_M_TEST: {
+                       char filename[UTIL_PATH_SIZE];
+                       struct stat statbuf;
+                       int match;
+
+                       udev_event_apply_format(event, &rules->buf[cur->key.value_off], filename, sizeof(filename));
+                       if (util_resolve_subsys_kernel(event->udev, filename, filename, sizeof(filename), 0) != 0) {
+                               if (filename[0] != '/') {
+                                       char tmp[UTIL_PATH_SIZE];
+
+                                       util_strscpy(tmp, sizeof(tmp), filename);
+                                       util_strscpyl(filename, sizeof(filename),
+                                                     udev_device_get_syspath(event->dev), "/", tmp, NULL);
+                               }
+                       }
+                       attr_subst_subdir(filename, sizeof(filename));
+
+                       match = (stat(filename, &statbuf) == 0);
+                       dbg(event->udev, "'%s' %s", filename, match ? "exists\n" : "does not exist\n");
+                       if (match && cur->key.mode > 0) {
+                               match = ((statbuf.st_mode & cur->key.mode) > 0);
+                               dbg(event->udev, "'%s' has mode=%#o and %s %#o\n", filename, statbuf.st_mode,
+                                   match ? "matches" : "does not match", cur->key.mode);
+                       }
+                       if (match && cur->key.op == OP_NOMATCH)
+                               goto nomatch;
+                       if (!match && cur->key.op == OP_MATCH)
+                               goto nomatch;
+                       break;
+               }
+               case TK_M_EVENT_TIMEOUT:
+                       info(event->udev, "OPTIONS event_timeout=%u\n", cur->key.event_timeout);
+                       event->timeout_usec = cur->key.event_timeout * 1000 * 1000;
+                       break;
+               case TK_M_PROGRAM: {
+                       char program[UTIL_PATH_SIZE];
+                       char **envp;
+                       char result[UTIL_PATH_SIZE];
+
+                       free(event->program_result);
+                       event->program_result = NULL;
+                       udev_event_apply_format(event, &rules->buf[cur->key.value_off], program, sizeof(program));
+                       envp = udev_device_get_properties_envp(event->dev);
+                       info(event->udev, "PROGRAM '%s' %s:%u\n",
+                            program,
+                            &rules->buf[rule->rule.filename_off],
+                            rule->rule.filename_line);
 
-                                       util_remove_trailing_chars(result, '\n');
-                                       if (esc == ESCAPE_UNSET || esc == ESCAPE_REPLACE) {
-                                               count = udev_util_replace_chars(result, UDEV_ALLOWED_CHARS_INPUT);
-                                               if (count > 0)
-                                                       info(event->udev, "%i character(s) replaced\n" , count);
-                                       }
-                                       event->program_result = strdup(result);
-                                       dbg(event->udev, "storing result '%s'\n", event->program_result);
-                                       if (cur->key.op == OP_NOMATCH)
-                                               goto nomatch;
+                       if (udev_event_spawn(event, program, envp, sigmask, result, sizeof(result)) < 0) {
+                               if (cur->key.op != OP_NOMATCH)
+                                       goto nomatch;
+                       } else {
+                               int count;
+
+                               util_remove_trailing_chars(result, '\n');
+                               if (esc == ESCAPE_UNSET || esc == ESCAPE_REPLACE) {
+                                       count = util_replace_chars(result, UDEV_ALLOWED_CHARS_INPUT);
+                                       if (count > 0)
+                                               info(event->udev, "%i character(s) replaced\n" , count);
                                }
-                               break;
+                               event->program_result = strdup(result);
+                               dbg(event->udev, "storing result '%s'\n", event->program_result);
+                               if (cur->key.op == OP_NOMATCH)
+                                       goto nomatch;
                        }
-               case TK_M_IMPORT_FILE:
-                       {
-                               char import[UTIL_PATH_SIZE];
+                       break;
+               }
+               case TK_M_IMPORT_FILE: {
+                       char import[UTIL_PATH_SIZE];
 
-                               udev_event_apply_format(event, &rules->buf[cur->key.value_off], import, sizeof(import));
-                               if (import_file_into_properties(event->dev, import) != 0)
+                       udev_event_apply_format(event, &rules->buf[cur->key.value_off], import, sizeof(import));
+                       if (import_file_into_properties(event->dev, import) != 0)
+                               if (cur->key.op != OP_NOMATCH)
+                                       goto nomatch;
+                       break;
+               }
+               case TK_M_IMPORT_PROG: {
+                       char import[UTIL_PATH_SIZE];
+
+                       udev_event_apply_format(event, &rules->buf[cur->key.value_off], import, sizeof(import));
+                       info(event->udev, "IMPORT '%s' %s:%u\n",
+                            import,
+                            &rules->buf[rule->rule.filename_off],
+                            rule->rule.filename_line);
+
+                       if (import_program_into_properties(event, import, sigmask) != 0)
+                               if (cur->key.op != OP_NOMATCH)
+                                       goto nomatch;
+                       break;
+               }
+               case TK_M_IMPORT_BUILTIN: {
+                       char command[UTIL_PATH_SIZE];
+
+                       if (udev_builtin_run_once(cur->key.builtin_cmd)) {
+                               /* check if we ran already */
+                               if (event->builtin_run & (1 << cur->key.builtin_cmd)) {
+                                       info(event->udev, "IMPORT builtin skip '%s' %s:%u\n",
+                                            udev_builtin_name(cur->key.builtin_cmd),
+                                            &rules->buf[rule->rule.filename_off],
+                                            rule->rule.filename_line);
+                                       /* return the result from earlier run */
+                                       if (event->builtin_ret & (1 << cur->key.builtin_cmd))
                                        if (cur->key.op != OP_NOMATCH)
-                                               goto nomatch;
-                               break;
+                                                       goto nomatch;
+                                       break;
+                               }
+                               /* mark as ran */
+                               event->builtin_run |= (1 << cur->key.builtin_cmd);
                        }
-               case TK_M_IMPORT_PROG:
-                       {
-                               char import[UTIL_PATH_SIZE];
-
-                               udev_event_apply_format(event, &rules->buf[cur->key.value_off], import, sizeof(import));
-                               info(event->udev, "IMPORT '%s' %s:%u\n",
-                                    import,
-                                    &rules->buf[rule->rule.filename_off],
-                                    rule->rule.filename_line);
-                               if (import_program_into_properties(event->dev, import) != 0)
-                                       if (cur->key.op != OP_NOMATCH)
-                                               goto nomatch;
-                               break;
+
+                       udev_event_apply_format(event, &rules->buf[cur->key.value_off], command, sizeof(command));
+                       info(event->udev, "IMPORT builtin '%s' %s:%u\n",
+                            udev_builtin_name(cur->key.builtin_cmd),
+                            &rules->buf[rule->rule.filename_off],
+                            rule->rule.filename_line);
+
+                       if (udev_builtin_run(event->dev, cur->key.builtin_cmd, command, false) != 0) {
+                               /* remember failure */
+                               info(rules->udev, "IMPORT builtin '%s' returned non-zero\n",
+                                    udev_builtin_name(cur->key.builtin_cmd));
+                               event->builtin_ret |= (1 << cur->key.builtin_cmd);
+                               if (cur->key.op != OP_NOMATCH)
+                                       goto nomatch;
                        }
-               case TK_M_IMPORT_PARENT:
-                       {
-                               char import[UTIL_PATH_SIZE];
+                       break;
+               }
+               case TK_M_IMPORT_DB: {
+                       const char *key = &rules->buf[cur->key.value_off];
+                       const char *value;
 
-                               udev_event_apply_format(event, &rules->buf[cur->key.value_off], import, sizeof(import));
-                               if (import_parent_into_properties(event->dev, import) != 0)
-                                       if (cur->key.op != OP_NOMATCH)
-                                               goto nomatch;
-                               break;
+                       value = udev_device_get_property_value(event->dev_db, key);
+                       if (value != NULL) {
+                               struct udev_list_entry *entry;
+
+                               entry = udev_device_add_property(event->dev, key, value);
+                               udev_list_entry_set_num(entry, true);
+                       } else {
+                               if (cur->key.op != OP_NOMATCH)
+                                       goto nomatch;
                        }
-               case TK_M_RESULT:
-                       if (match_key(rules, cur, event->program_result) != 0)
+                       break;
+               }
+               case TK_M_IMPORT_CMDLINE: {
+                       FILE *f;
+                       bool imported = false;
+
+                       f = fopen("/proc/cmdline", "r");
+                       if (f != NULL) {
+                               char cmdline[4096];
+
+                               if (fgets(cmdline, sizeof(cmdline), f) != NULL) {
+                                       const char *key = &rules->buf[cur->key.value_off];
+                                       char *pos;
+
+                                       pos = strstr(cmdline, key);
+                                       if (pos != NULL) {
+                                               struct udev_list_entry *entry;
+
+                                               pos += strlen(key);
+                                               if (pos[0] == '\0' || isspace(pos[0])) {
+                                                       /* we import simple flags as 'FLAG=1' */
+                                                       entry = udev_device_add_property(event->dev, key, "1");
+                                                       udev_list_entry_set_num(entry, true);
+                                                       imported = true;
+                                               } else if (pos[0] == '=') {
+                                                       const char *value;
+
+                                                       pos++;
+                                                       value = pos;
+                                                       while (pos[0] != '\0' && !isspace(pos[0]))
+                                                               pos++;
+                                                       pos[0] = '\0';
+                                                       entry = udev_device_add_property(event->dev, key, value);
+                                                       udev_list_entry_set_num(entry, true);
+                                                       imported = true;
+                                               }
+                                       }
+                               }
+                               fclose(f);
+                       }
+                       if (!imported && cur->key.op != OP_NOMATCH)
                                goto nomatch;
                        break;
+               }
+               case TK_M_IMPORT_PARENT: {
+                       char import[UTIL_PATH_SIZE];
 
-               case TK_A_IGNORE_DEVICE:
-                       event->ignore_device = 1;
-                       return 0;
+                       udev_event_apply_format(event, &rules->buf[cur->key.value_off], import, sizeof(import));
+                       if (import_parent_into_properties(event->dev, import) != 0)
+                               if (cur->key.op != OP_NOMATCH)
+                                       goto nomatch;
+                       break;
+               }
+               case TK_M_RESULT:
+                       if (match_key(rules, cur, event->program_result) != 0)
+                               goto nomatch;
                        break;
                case TK_A_STRING_ESCAPE_NONE:
                        esc = ESCAPE_NONE;
@@ -2268,77 +2416,77 @@ int udev_rules_apply_to_event(struct udev_rules *rules, struct udev_event *event
                case TK_A_STRING_ESCAPE_REPLACE:
                        esc = ESCAPE_REPLACE;
                        break;
-               case TK_A_NUM_FAKE_PART:
-                       if (strcmp(udev_device_get_subsystem(event->dev), "block") != 0)
-                               break;
-                       if (udev_device_get_sysnum(event->dev) != NULL)
-                               break;
-                       udev_device_set_num_fake_partitions(event->dev, cur->key.num_fake_part);
+               case TK_A_DB_PERSIST:
+                       udev_device_set_db_persist(event->dev);
                        break;
                case TK_A_INOTIFY_WATCH:
+                       if (event->inotify_watch_final)
+                               break;
+                       if (cur->key.op == OP_ASSIGN_FINAL)
+                               event->inotify_watch_final = true;
                        event->inotify_watch = cur->key.watch;
                        break;
                case TK_A_DEVLINK_PRIO:
                        udev_device_set_devlink_priority(event->dev, cur->key.devlink_prio);
                        break;
-               case TK_A_OWNER:
-                       {
-                               char owner[UTIL_NAME_SIZE];
+               case TK_A_OWNER: {
+                       char owner[UTIL_NAME_SIZE];
 
-                               if (event->owner_final)
-                                       break;
-                               if (cur->key.op == OP_ASSIGN_FINAL)
-                                       event->owner_final = 1;
-                               udev_event_apply_format(event, &rules->buf[cur->key.value_off], owner, sizeof(owner));
-                               event->uid = util_lookup_user(event->udev, owner);
-                               info(event->udev, "OWNER %u %s:%u\n",
-                                    event->uid,
-                                    &rules->buf[rule->rule.filename_off],
-                                    rule->rule.filename_line);
+                       if (event->owner_final)
                                break;
-                       }
-               case TK_A_GROUP:
-                       {
-                               char group[UTIL_NAME_SIZE];
+                       if (cur->key.op == OP_ASSIGN_FINAL)
+                               event->owner_final = true;
+                       udev_event_apply_format(event, &rules->buf[cur->key.value_off], owner, sizeof(owner));
+                       event->uid = util_lookup_user(event->udev, owner);
+                       info(event->udev, "OWNER %u %s:%u\n",
+                            event->uid,
+                            &rules->buf[rule->rule.filename_off],
+                            rule->rule.filename_line);
+                       break;
+               }
+               case TK_A_GROUP: {
+                       char group[UTIL_NAME_SIZE];
 
-                               if (event->group_final)
-                                       break;
-                               if (cur->key.op == OP_ASSIGN_FINAL)
-                                       event->group_final = 1;
-                               udev_event_apply_format(event, &rules->buf[cur->key.value_off], group, sizeof(group));
-                               event->gid = util_lookup_group(event->udev, group);
-                               info(event->udev, "GROUP %u %s:%u\n",
-                                    event->gid,
-                                    &rules->buf[rule->rule.filename_off],
-                                    rule->rule.filename_line);
+                       if (event->group_final)
                                break;
-                       }
-               case TK_A_MODE:
-                       {
-                               char mode[UTIL_NAME_SIZE];
-                               char *endptr;
+                       if (cur->key.op == OP_ASSIGN_FINAL)
+                               event->group_final = true;
+                       udev_event_apply_format(event, &rules->buf[cur->key.value_off], group, sizeof(group));
+                       event->gid = util_lookup_group(event->udev, group);
+                       info(event->udev, "GROUP %u %s:%u\n",
+                            event->gid,
+                            &rules->buf[rule->rule.filename_off],
+                            rule->rule.filename_line);
+                       break;
+               }
+               case TK_A_MODE: {
+                       char mode_str[UTIL_NAME_SIZE];
+                       mode_t mode;
+                       char *endptr;
 
-                               if (event->mode_final)
-                                       break;
-                               if (cur->key.op == OP_ASSIGN_FINAL)
-                                       event->mode_final = 1;
-                               udev_event_apply_format(event, &rules->buf[cur->key.value_off], mode, sizeof(mode));
-                               event->mode = strtol(mode, &endptr, 8);
-                               if (endptr[0] != '\0') {
-                                       err(event->udev, "invalide mode '%s' set default mode 0660\n", mode);
-                                       event->mode = 0660;
-                               }
-                               info(event->udev, "MODE %#o %s:%u\n",
-                                    event->mode,
-                                    &rules->buf[rule->rule.filename_off],
-                                    rule->rule.filename_line);
+                       if (event->mode_final)
+                               break;
+                       udev_event_apply_format(event, &rules->buf[cur->key.value_off], mode_str, sizeof(mode_str));
+                       mode = strtol(mode_str, &endptr, 8);
+                       if (endptr[0] != '\0') {
+                               err(event->udev, "ignoring invalid mode '%s'\n", mode_str);
                                break;
                        }
+                       if (cur->key.op == OP_ASSIGN_FINAL)
+                               event->mode_final = true;
+                       event->mode_set = true;
+                       event->mode = mode;
+                       info(event->udev, "MODE %#o %s:%u\n",
+                            event->mode,
+                            &rules->buf[rule->rule.filename_off],
+                            rule->rule.filename_line);
+                       break;
+               }
                case TK_A_OWNER_ID:
                        if (event->owner_final)
                                break;
                        if (cur->key.op == OP_ASSIGN_FINAL)
-                               event->owner_final = 1;
+                               event->owner_final = true;
                        event->uid = cur->key.uid;
                        info(event->udev, "OWNER %u %s:%u\n",
                             event->uid,
@@ -2349,7 +2497,7 @@ int udev_rules_apply_to_event(struct udev_rules *rules, struct udev_event *event
                        if (event->group_final)
                                break;
                        if (cur->key.op == OP_ASSIGN_FINAL)
-                               event->group_final = 1;
+                               event->group_final = true;
                        event->gid = cur->key.gid;
                        info(event->udev, "GROUP %u %s:%u\n",
                             event->gid,
@@ -2360,161 +2508,163 @@ int udev_rules_apply_to_event(struct udev_rules *rules, struct udev_event *event
                        if (event->mode_final)
                                break;
                        if (cur->key.op == OP_ASSIGN_FINAL)
-                               event->mode_final = 1;
+                               event->mode_final = true;
+                       event->mode_set = true;
                        event->mode = cur->key.mode;
                        info(event->udev, "MODE %#o %s:%u\n",
                             event->mode,
                             &rules->buf[rule->rule.filename_off],
                             rule->rule.filename_line);
                        break;
-               case TK_A_ENV:
-                       {
-                               const char *name = &rules->buf[cur->key.attr_off];
-                               char *value = &rules->buf[cur->key.value_off];
-
-                               if (value[0] != '\0') {
-                                       char temp_value[UTIL_NAME_SIZE];
-                                       struct udev_list_entry *entry;
-
-                                       udev_event_apply_format(event, value, temp_value, sizeof(temp_value));
-                                       entry = udev_device_add_property(event->dev, name, temp_value);
-                                       /* store in db, skip private keys */
-                                       if (name[0] != '.')
-                                               udev_list_entry_set_flag(entry, 1);
-                               } else {
-                                       udev_device_add_property(event->dev, name, NULL);
-                               }
+               case TK_A_STATIC_NODE:
+                       event->static_node = true;
+                       break;
+               case TK_A_ENV: {
+                       const char *name = &rules->buf[cur->key.attr_off];
+                       char *value = &rules->buf[cur->key.value_off];
+
+                       if (value[0] != '\0') {
+                               char temp_value[UTIL_NAME_SIZE];
+                               struct udev_list_entry *entry;
+
+                               udev_event_apply_format(event, value, temp_value, sizeof(temp_value));
+                               entry = udev_device_add_property(event->dev, name, temp_value);
+                               /* store in db, skip private keys */
+                               if (name[0] != '.')
+                                       udev_list_entry_set_num(entry, true);
+                       } else {
+                               udev_device_add_property(event->dev, name, NULL);
+                       }
+                       break;
+               }
+               case TK_A_TAG: {
+                       char tag[UTIL_PATH_SIZE];
+                       const char *p;
+
+                       udev_event_apply_format(event, &rules->buf[cur->key.value_off], tag, sizeof(tag));
+                       if (cur->key.op == OP_ASSIGN || cur->key.op == OP_ASSIGN_FINAL)
+                               udev_device_cleanup_tags_list(event->dev);
+                       for (p = tag; *p != '\0'; p++) {
+                               if ((*p >= 'a' && *p <= 'z') ||
+                                   (*p >= 'A' && *p <= 'Z') ||
+                                   (*p >= '0' && *p <= '9') ||
+                                   *p == '-' || *p == '_')
+                                       continue;
+                               err(event->udev, "ignoring invalid tag name '%s'\n", tag);
                                break;
                        }
-               case TK_A_NAME:
-                       {
-                               const char *name  = &rules->buf[cur->key.value_off];
-                               char name_str[UTIL_PATH_SIZE];
-                               int count;
+                       udev_device_add_tag(event->dev, tag);
+                       break;
+               }
+               case TK_A_NAME: {
+                       const char *name  = &rules->buf[cur->key.value_off];
+                       char name_str[UTIL_PATH_SIZE];
+                       int count;
 
-                               if (event->name_final)
-                                       break;
-                               if (cur->key.op == OP_ASSIGN_FINAL)
-                                       event->name_final = 1;
-                               udev_event_apply_format(event, name, name_str, sizeof(name_str));
-                               if (esc == ESCAPE_UNSET || esc == ESCAPE_REPLACE) {
-                                       count = udev_util_replace_chars(name_str, "/");
-                                       if (count > 0)
-                                               info(event->udev, "%i character(s) replaced\n", count);
-                               }
-                               free(event->name);
-                               event->name = strdup(name_str);
-                               info(event->udev, "NAME '%s' %s:%u\n",
-                                    event->name,
-                                    &rules->buf[rule->rule.filename_off],
-                                    rule->rule.filename_line);
+                       if (event->name_final)
                                break;
-                       }
-               case TK_A_DEVLINK:
-                       {
-                               char temp[UTIL_PATH_SIZE];
-                               char filename[UTIL_PATH_SIZE];
-                               char *pos, *next;
-                               int count = 0;
-
-                               if (event->devlink_final)
-                                       break;
-                               if (major(udev_device_get_devnum(event->dev)) == 0)
-                                       break;
-                               if (cur->key.op == OP_ASSIGN_FINAL)
-                                       event->devlink_final = 1;
-                               if (cur->key.op == OP_ASSIGN || cur->key.op == OP_ASSIGN_FINAL)
-                                       udev_device_cleanup_devlinks_list(event->dev);
-
-                               /* allow  multiple symlinks separated by spaces */
-                               udev_event_apply_format(event, &rules->buf[cur->key.value_off], temp, sizeof(temp));
-                               if (esc == ESCAPE_UNSET)
-                                       count = udev_util_replace_chars(temp, "/ ");
-                               else if (esc == ESCAPE_REPLACE)
-                                       count = udev_util_replace_chars(temp, "/");
+                       if (cur->key.op == OP_ASSIGN_FINAL)
+                               event->name_final = true;
+                       udev_event_apply_format(event, name, name_str, sizeof(name_str));
+                       if (esc == ESCAPE_UNSET || esc == ESCAPE_REPLACE) {
+                               count = util_replace_chars(name_str, "/");
                                if (count > 0)
-                                       info(event->udev, "%i character(s) replaced\n" , count);
-                               dbg(event->udev, "rule applied, added symlink(s) '%s'\n", temp);
-                               pos = temp;
-                               while (isspace(pos[0]))
-                                       pos++;
-                               next = strchr(pos, ' ');
-                               while (next) {
-                                       next[0] = '\0';
-                                       info(event->udev, "LINK '%s' %s:%u\n",
-                                            pos,
-                                            &rules->buf[rule->rule.filename_off],
-                                            rule->rule.filename_line);
-                                       util_strscpyl(filename, sizeof(filename), udev_get_dev_path(event->udev), "/", pos, NULL);
-                                       udev_device_add_devlink(event->dev, filename);
-                                       while (isspace(next[1]))
-                                               next++;
-                                       pos = &next[1];
-                                       next = strchr(pos, ' ');
-                               }
-                               if (pos[0] != '\0') {
-                                       info(event->udev, "LINK '%s' %s:%u\n",
-                                            pos,
-                                            &rules->buf[rule->rule.filename_off],
-                                            rule->rule.filename_line);
-                                       util_strscpyl(filename, sizeof(filename), udev_get_dev_path(event->udev), "/", pos, NULL);
-                                       udev_device_add_devlink(event->dev, filename);
-                               }
+                                       info(event->udev, "%i character(s) replaced\n", count);
                        }
+                       free(event->name);
+                       event->name = strdup(name_str);
+                       info(event->udev, "NAME '%s' %s:%u\n",
+                            event->name,
+                            &rules->buf[rule->rule.filename_off],
+                            rule->rule.filename_line);
                        break;
-               case TK_A_EVENT_TIMEOUT:
-                       udev_device_set_event_timeout(event->dev, cur->key.event_timeout);
-                       break;
-               case TK_A_IGNORE_REMOVE:
-                       udev_device_set_ignore_remove(event->dev, 1);
-                       break;
-               case TK_A_ATTR:
-                       {
-                               const char *key_name = &rules->buf[cur->key.attr_off];
-                               char attr[UTIL_PATH_SIZE];
-                               char value[UTIL_NAME_SIZE];
-                               FILE *f;
-
-                               if (util_resolve_subsys_kernel(event->udev, key_name, attr, sizeof(attr), 0) != 0)
-                                       util_strscpyl(attr, sizeof(attr), udev_device_get_syspath(event->dev), "/", key_name, NULL);
-                               attr_subst_subdir(attr, sizeof(attr));
-
-                               udev_event_apply_format(event, &rules->buf[cur->key.value_off], value, sizeof(value));
-                               info(event->udev, "ATTR '%s' writing '%s' %s:%u\n", attr, value,
-                                    &rules->buf[rule->rule.filename_off],
-                                    rule->rule.filename_line);
-                               f = fopen(attr, "w");
-                               if (f != NULL) {
-                                       if (fprintf(f, "%s", value) <= 0)
-                                               err(event->udev, "error writing ATTR{%s}: %m\n", attr);
-                                       fclose(f);
-                               } else {
-                                       err(event->udev, "error opening ATTR{%s} for writing: %m\n", attr);
-                               }
+               }
+               case TK_A_DEVLINK: {
+                       char temp[UTIL_PATH_SIZE];
+                       char filename[UTIL_PATH_SIZE];
+                       char *pos, *next;
+                       int count = 0;
+
+                       if (event->devlink_final)
                                break;
-                       }
-               case TK_A_RUN:
-                       {
-                               struct udev_list_entry *list_entry;
-
-                               if (cur->key.op == OP_ASSIGN || cur->key.op == OP_ASSIGN_FINAL)
-                                       udev_list_cleanup_entries(event->udev, &event->run_list);
-                               info(event->udev, "RUN '%s' %s:%u\n",
-                                    &rules->buf[cur->key.value_off],
-                                    &rules->buf[rule->rule.filename_off],
-                                    rule->rule.filename_line);
-                               list_entry = udev_list_entry_add(event->udev, &event->run_list,
-                                                                &rules->buf[cur->key.value_off], NULL, 1, 0);
-                               if (cur->key.ignore_error)
-                                       udev_list_entry_set_flag(list_entry, 1);
+                       if (major(udev_device_get_devnum(event->dev)) == 0)
                                break;
+                       if (cur->key.op == OP_ASSIGN_FINAL)
+                               event->devlink_final = true;
+                       if (cur->key.op == OP_ASSIGN || cur->key.op == OP_ASSIGN_FINAL)
+                               udev_device_cleanup_devlinks_list(event->dev);
+
+                       /* allow  multiple symlinks separated by spaces */
+                       udev_event_apply_format(event, &rules->buf[cur->key.value_off], temp, sizeof(temp));
+                       if (esc == ESCAPE_UNSET)
+                               count = util_replace_chars(temp, "/ ");
+                       else if (esc == ESCAPE_REPLACE)
+                               count = util_replace_chars(temp, "/");
+                       if (count > 0)
+                               info(event->udev, "%i character(s) replaced\n" , count);
+                       dbg(event->udev, "rule applied, added symlink(s) '%s'\n", temp);
+                       pos = temp;
+                       while (isspace(pos[0]))
+                               pos++;
+                       next = strchr(pos, ' ');
+                       while (next != NULL) {
+                               next[0] = '\0';
+                               info(event->udev, "LINK '%s' %s:%u\n", pos,
+                                    &rules->buf[rule->rule.filename_off], rule->rule.filename_line);
+                               util_strscpyl(filename, sizeof(filename), udev_get_dev_path(event->udev), "/", pos, NULL);
+                               udev_device_add_devlink(event->dev, filename, cur->key.devlink_unique);
+                               while (isspace(next[1]))
+                                       next++;
+                               pos = &next[1];
+                               next = strchr(pos, ' ');
+                       }
+                       if (pos[0] != '\0') {
+                               info(event->udev, "LINK '%s' %s:%u\n", pos,
+                                    &rules->buf[rule->rule.filename_off], rule->rule.filename_line);
+                               util_strscpyl(filename, sizeof(filename), udev_get_dev_path(event->udev), "/", pos, NULL);
+                               udev_device_add_devlink(event->dev, filename, cur->key.devlink_unique);
                        }
+                       break;
+               }
+               case TK_A_ATTR: {
+                       const char *key_name = &rules->buf[cur->key.attr_off];
+                       char attr[UTIL_PATH_SIZE];
+                       char value[UTIL_NAME_SIZE];
+                       FILE *f;
+
+                       if (util_resolve_subsys_kernel(event->udev, key_name, attr, sizeof(attr), 0) != 0)
+                               util_strscpyl(attr, sizeof(attr), udev_device_get_syspath(event->dev), "/", key_name, NULL);
+                       attr_subst_subdir(attr, sizeof(attr));
+
+                       udev_event_apply_format(event, &rules->buf[cur->key.value_off], value, sizeof(value));
+                       info(event->udev, "ATTR '%s' writing '%s' %s:%u\n", attr, value,
+                            &rules->buf[rule->rule.filename_off],
+                            rule->rule.filename_line);
+                       f = fopen(attr, "w");
+                       if (f != NULL) {
+                               if (fprintf(f, "%s", value) <= 0)
+                                       err(event->udev, "error writing ATTR{%s}: %m\n", attr);
+                               fclose(f);
+                       } else {
+                               err(event->udev, "error opening ATTR{%s} for writing: %m\n", attr);
+                       }
+                       break;
+               }
+               case TK_A_RUN: {
+                       if (cur->key.op == OP_ASSIGN || cur->key.op == OP_ASSIGN_FINAL)
+                               udev_list_cleanup(&event->run_list);
+                       info(event->udev, "RUN '%s' %s:%u\n",
+                            &rules->buf[cur->key.value_off],
+                            &rules->buf[rule->rule.filename_off],
+                            rule->rule.filename_line);
+                       udev_list_entry_add(&event->run_list, &rules->buf[cur->key.value_off], NULL);
+                       break;
+               }
                case TK_A_GOTO:
                        if (cur->key.rule_goto == 0)
                                break;
                        cur = &rules->tokens[cur->key.rule_goto];
                        continue;
-               case TK_A_LAST_RULE:
                case TK_END:
                        return 0;
 
@@ -2535,3 +2685,86 @@ int udev_rules_apply_to_event(struct udev_rules *rules, struct udev_event *event
                                 (unsigned int) (cur - rules->tokens));
        }
 }
+
+void udev_rules_apply_static_dev_perms(struct udev_rules *rules)
+{
+       struct token *cur;
+       struct token *rule;
+       uid_t uid = 0;
+       gid_t gid = 0;
+       mode_t mode = 0;
+
+       if (rules->tokens == NULL)
+               return;
+
+       cur = &rules->tokens[0];
+       rule = cur;
+       for (;;) {
+               switch (cur->type) {
+               case TK_RULE:
+                       /* current rule */
+                       rule = cur;
+
+                       /* skip rules without a static_node tag */
+                       if (!rule->rule.has_static_node)
+                               goto next;
+
+                       uid = 0;
+                       gid = 0;
+                       mode = 0;
+                       break;
+               case TK_A_OWNER_ID:
+                       uid = cur->key.uid;
+                       break;
+               case TK_A_GROUP_ID:
+                       gid = cur->key.gid;
+                       break;
+               case TK_A_MODE_ID:
+                       mode = cur->key.mode;
+                       break;
+               case TK_A_STATIC_NODE: {
+                       char filename[UTIL_PATH_SIZE];
+                       struct stat stats;
+
+                       /* we assure, that the permissions tokens are sorted before the static token */
+                       if (mode == 0 && uid == 0 && gid == 0)
+                               goto next;
+                       util_strscpyl(filename, sizeof(filename), udev_get_dev_path(rules->udev), "/",
+                                     &rules->buf[cur->key.value_off], NULL);
+                       if (stat(filename, &stats) != 0)
+                               goto next;
+                       if (!S_ISBLK(stats.st_mode) && !S_ISCHR(stats.st_mode))
+                               goto next;
+                       if (mode == 0) {
+                               if (gid > 0)
+                                       mode = 0660;
+                               else
+                                       mode = 0600;
+                       }
+                       /* set sticky bit, so we do not remove the node on module unload */
+                       mode |= 01000;
+                       if (mode != (stats.st_mode & 01777)) {
+                               chmod(filename, mode);
+                               info(rules->udev, "chmod '%s' %#o\n", filename, mode);
+                       }
+
+                       if ((uid != 0 && uid != stats.st_uid) || (gid != 0 && gid != stats.st_gid)) {
+                               chown(filename, uid, gid);
+                               info(rules->udev, "chown '%s' %u %u\n", filename, uid, gid);
+                       }
+
+                       utimensat(AT_FDCWD, filename, NULL, 0);
+                       break;
+               }
+               case TK_END:
+                       return;
+               }
+
+               cur++;
+               continue;
+next:
+               /* fast-forward to next rule */
+               cur = rule + rule->rule.token_count;
+               continue;
+       }
+}