chiark / gitweb /
udevd: track exit status of event process
[elogind.git] / udev_rules.c
index f09d6d47bfbdc8a0b0e1e238283a445c619c0dfc..a3100f8e143f7e051bd4102223772556e0367c28 100644 (file)
@@ -1,12 +1,9 @@
 /*
  * udev_rules.c
  *
- * Userspace devfs
- *
  * Copyright (C) 2003 Greg Kroah-Hartman <greg@kroah.com>
  * Copyright (C) 2003-2005 Kay Sievers <kay.sievers@vrfy.org>
  *
- *
  *     This program is free software; you can redistribute it and/or modify it
  *     under the terms of the GNU General Public License as published by the
  *     Free Software Foundation version 2 of the License.
@@ -30,6 +27,7 @@
 #include <ctype.h>
 #include <unistd.h>
 #include <errno.h>
+#include <syslog.h>
 #include <sys/wait.h>
 #include <sys/stat.h>
 
 #include "udev_rules.h"
 #include "udev_db.h"
 
-static struct sysfs_attribute *find_sysfs_attribute(struct sysfs_class_device *class_dev, struct sysfs_device *sysfs_device, char *attr);
-
-/* compare string with pattern (supports * ? [0-9] [!A-Z]) */
-static int strcmp_pattern(const char *p, const char *s)
-{
-       if (s[0] == '\0') {
-               while (p[0] == '*')
-                       p++;
-               return (p[0] != '\0');
-       }
-       switch (p[0]) {
-       case '[':
-               {
-                       int not = 0;
-                       p++;
-                       if (p[0] == '!') {
-                               not = 1;
-                               p++;
-                       }
-                       while ((p[0] != '\0') && (p[0] != ']')) {
-                               int match = 0;
-                               if (p[1] == '-') {
-                                       if ((s[0] >= p[0]) && (s[0] <= p[2]))
-                                               match = 1;
-                                       p += 3;
-                               } else {
-                                       match = (p[0] == s[0]);
-                                       p++;
-                               }
-                               if (match ^ not) {
-                                       while ((p[0] != '\0') && (p[0] != ']'))
-                                               p++;
-                                       if (p[0] == ']')
-                                               return strcmp_pattern(p+1, s+1);
-                               }
-                       }
-               }
-               break;
-       case '*':
-               if (strcmp_pattern(p, s+1))
-                       return strcmp_pattern(p+1, s);
-               return 0;
-       case '\0':
-               if (s[0] == '\0') {
-                       return 0;
-               }
-               break;
-       default:
-               if ((p[0] == s[0]) || (p[0] == '?'))
-                       return strcmp_pattern(p+1, s+1);
-               break;
-       }
-       return 1;
-}
 
 /* extract possible {attr} and move str behind it */
 static char *get_format_attribute(char **str)
@@ -107,7 +51,7 @@ static char *get_format_attribute(char **str)
        if (*str[0] == '{') {
                pos = strchr(*str, '}');
                if (pos == NULL) {
-                       dbg("missing closing brace for format");
+                       err("missing closing brace for format");
                        return NULL;
                }
                pos[0] = '\0';
@@ -131,40 +75,328 @@ static int get_format_len(char **str)
                        dbg("format length=%i", num);
                        return num;
                } else {
-                       dbg("format parsing error '%s'", *str);
+                       err("format parsing error '%s'", *str);
                }
        }
        return -1;
 }
 
-/** Finds the lowest positive N such that <name>N isn't present in 
- *  $(udevroot) either as a file or a symlink.
- *
- *  @param  name                Name to check for
- *  @return                     0 if <name> didn't exist and N otherwise.
- */
-static int find_free_number(struct udevice *udev, const char *name)
+static int get_key(char **line, char **key, char **value)
 {
-       char devpath[PATH_SIZE];
+       char *linepos;
+       char *temp;
+
+       linepos = *line;
+       if (!linepos)
+               return -1;
+
+       if (strchr(linepos, '\\')) {
+               dbg("escaped characters are not supported, skip");
+               return -1;
+       }
+
+       /* skip whitespace */
+       while (isspace(linepos[0]))
+               linepos++;
+
+       /* get the key */
+       *key = linepos;
+       while (1) {
+               linepos++;
+               if (linepos[0] == '\0')
+                       return -1;
+               if (isspace(linepos[0]))
+                       break;
+               if (linepos[0] == '=')
+                       break;
+       }
+
+       /* terminate key */
+       linepos[0] = '\0';
+       linepos++;
+
+       /* skip whitespace */
+       while (isspace(linepos[0]))
+               linepos++;
+
+       /* get the value*/
+       if (linepos[0] == '"') {
+               linepos++;
+               temp = strchr(linepos, '"');
+               if (!temp) {
+                       dbg("missing closing quote");
+                       return -1;
+               }
+               dbg("value is quoted");
+               temp[0] = '\0';
+       } else if (linepos[0] == '\'') {
+               linepos++;
+               temp = strchr(linepos, '\'');
+               if (!temp) {
+                       dbg("missing closing quote");
+                       return -1;
+               }
+               dbg("value is quoted");
+               temp[0] = '\0';
+       } else if (linepos[0] == '\0') {
+               dbg("value is empty");
+       } else {
+               temp = linepos;
+               while (temp[0] && !isspace(temp[0]))
+                       temp++;
+               temp[0] = '\0';
+       }
+       *value = linepos;
+
+       return 0;
+}
+
+static int import_keys_into_env(struct udevice *udev, const char *buf, size_t bufsize)
+{
+       char line[LINE_SIZE];
+       const char *bufline;
+       char *linepos;
+       char *variable;
+       char *value;
+       size_t cur;
+       size_t count;
+       int lineno;
+
+       /* loop through the whole buffer */
+       lineno = 0;
+       cur = 0;
+       while (cur < bufsize) {
+               count = buf_get_line(buf, bufsize, cur);
+               bufline = &buf[cur];
+               cur += count+1;
+               lineno++;
+
+               if (count >= sizeof(line)) {
+                       err("line too long, conf line skipped %s, line %d", udev_config_filename, lineno);
+                       continue;
+               }
+
+               /* eat the whitespace */
+               while ((count > 0) && isspace(bufline[0])) {
+                       bufline++;
+                       count--;
+               }
+               if (count == 0)
+                       continue;
+
+               /* see if this is a comment */
+               if (bufline[0] == COMMENT_CHARACTER)
+                       continue;
+
+               memcpy(line, bufline, count);
+               line[count] = '\0';
+
+               linepos = line;
+               if (get_key(&linepos, &variable, &value) == 0) {
+                       dbg("import '%s=%s'", variable, value);
+                       name_list_key_add(&udev->env_list, variable, value);
+                       setenv(variable, value, 1);
+               }
+       }
+
+       return 0;
+}
+
+static int import_file_into_env(struct udevice *udev, const char *filename)
+{
+       char *buf;
+       size_t bufsize;
+
+       if (file_map(filename, &buf, &bufsize) != 0) {
+               err("can't open '%s': %s", filename, strerror(errno));
+               return -1;
+       }
+       import_keys_into_env(udev, buf, bufsize);
+       file_unmap(buf, bufsize);
+
+       return 0;
+}
+
+static int import_program_into_env(struct udevice *udev, const char *program)
+{
+       char result[1024];
+       size_t reslen;
+
+       if (run_program(program, udev->subsystem, result, sizeof(result), &reslen, (udev_log_priority >= LOG_INFO)) != 0)
+               return -1;
+       return import_keys_into_env(udev, result, reslen);
+}
+
+static int import_parent_into_env(struct udevice *udev, struct sysfs_class_device *class_dev, const char *filter)
+{
+       struct sysfs_class_device *parent = sysfs_get_classdev_parent(class_dev);
+       int rc = -1;
+
+       if (parent != NULL) {
+               struct udevice udev_parent;
+               struct name_entry *name_loop;
+
+               dbg("found parent '%s', get the node name", parent->path);
+               udev_init_device(&udev_parent, NULL, NULL, NULL);
+               /* import the udev_db of the parent */
+               if (udev_db_get_device(&udev_parent, &parent->path[strlen(sysfs_path)]) == 0) {
+                       dbg("import stored parent env '%s'", udev_parent.name);
+                       list_for_each_entry(name_loop, &udev_parent.env_list, node) {
+                               char name[NAME_SIZE];
+                               char *pos;
+
+                               strlcpy(name, name_loop->name, sizeof(name));
+                               pos = strchr(name, '=');
+                               if (pos) {
+                                       pos[0] = '\0';
+                                       pos++;
+                                       if (strcmp_pattern(filter, name) == 0) {
+                                               dbg("import key '%s'", name_loop->name);
+                                               name_list_add(&udev->env_list, name_loop->name, 0);
+                                               setenv(name, pos, 1);
+                                       } else
+                                               dbg("skip key '%s'", name_loop->name);
+                               }
+                       }
+                       rc = 0;
+               } else
+                       dbg("parent not found in database");
+               udev_cleanup_device(&udev_parent);
+       }
+
+       return rc;
+}
+
+static int match_name_and_get_number(const char *base, const char *devname)
+{
+       size_t baselen;
+       char *endptr;
+       int num;
+
+       baselen = strlen(base);
+       if (strncmp(base, devname, baselen) != 0)
+               return -1;
+       if (devname[baselen] == '\0')
+               return 0;
+       if (!isdigit(devname[baselen]))
+               return -1;
+       num = strtoul(&devname[baselen], &endptr, 10);
+       if (endptr[0] != '\0')
+               return -1;
+       return num;
+}
+
+/* finds the lowest positive device number such that <name>N isn't present in the udevdb
+ * if <name> doesn't exist, 0 is returned, N otherwise */
+static int find_free_number(const char *base, const char *devpath)
+{
+       char db_devpath[PATH_SIZE];
        char filename[PATH_SIZE];
+       struct udevice udev_db;
        int num = 0;
 
-       strlcpy(filename, name, sizeof(filename));
+       /* check if the device already owns a matching name */
+       udev_init_device(&udev_db, NULL, NULL, NULL);
+       if (udev_db_get_device(&udev_db, devpath) == 0) {
+               struct name_entry *name_loop;
+               int devnum;
+
+               devnum = match_name_and_get_number(base, udev_db.name);
+               if (devnum >= 0) {
+                       num = devnum;
+                       dbg("device '%s', already has the node '%s' with num %u, use it", devpath, base, num);
+                       goto out;
+               }
+               list_for_each_entry(name_loop, &udev_db.symlink_list, node) {
+                       devnum = match_name_and_get_number(base, name_loop->name);
+                       if (devnum >= 0) {
+                               num = devnum;
+                               dbg("device '%s', already has a symlink '%s' with num %u, use it", devpath, base, num);
+                               goto out;
+                       }
+               }
+       }
+
+       /* just search the database again and again until a free name is found */
+       strlcpy(filename, base, sizeof(filename));
        while (1) {
                dbg("look for existing node '%s'", filename);
-               if (udev_db_search_name(devpath, sizeof(devpath), filename) != 0) {
+               if (udev_db_lookup_name(filename, db_devpath, sizeof(db_devpath)) != 0) {
                        dbg("free num=%d", num);
-                       return num;
+                       break;
                }
 
                num++;
-               if (num > 1000) {
-                       info("find_free_number gone crazy (num=%d), aborted", num);
-                       return -1;
+               if (num > 100000) {
+                       err("find_free_number aborted at num=%d", num);
+                       num = -1;
+                       break;
                }
-               snprintf(filename, sizeof(filename), "%s%d", name, num);
+               snprintf(filename, sizeof(filename), "%s%d", base, num);
                filename[sizeof(filename)-1] = '\0';
        }
+
+out:
+       udev_cleanup_device(&udev_db);
+       return num;
+}
+
+static int find_sysfs_attribute(struct sysfs_class_device *class_dev, struct sysfs_device *sysfs_device,
+                               const char *name, char *value, size_t len)
+{
+       struct sysfs_class_device *class_dev_parent;
+       struct sysfs_attribute *tmpattr;
+
+       dbg("look for device attribute '%s'", name);
+       if (class_dev) {
+               dbg("look for class attribute '%s/%s'", class_dev->path, name);
+               tmpattr = sysfs_get_classdev_attr(class_dev, name);
+               if (tmpattr)
+                       goto attr_found;
+               class_dev_parent = sysfs_get_classdev_parent(class_dev);
+               if (class_dev_parent) {
+                       tmpattr = sysfs_get_classdev_attr(class_dev_parent, name);
+                       if (tmpattr)
+                               goto attr_found;
+               }
+       }
+       if (sysfs_device) {
+               dbg("look for devices attribute '%s/%s'", sysfs_device->path, name);
+               tmpattr = sysfs_get_device_attr(sysfs_device, name);
+               if (tmpattr)
+                       goto attr_found;
+       }
+       return -1;
+
+attr_found:
+       strlcpy(value, tmpattr->value, len);
+       remove_trailing_chars(value, '\n');
+
+       dbg("found attribute '%s'", tmpattr->path);
+       return 0;
+}
+
+#define WAIT_LOOP_PER_SECOND           50
+static int wait_for_sysfs(struct udevice *udev, const char *file, int timeout)
+{
+       char filename[PATH_SIZE];
+       struct stat stats;
+       int loop = timeout * WAIT_LOOP_PER_SECOND;
+
+       snprintf(filename, sizeof(filename), "%s%s/%s", sysfs_path, udev->devpath, file);
+       filename[sizeof(filename)-1] = '\0';
+       dbg("wait %i sec for '%s'", timeout, filename);
+
+       while (--loop) {
+               if (stat(filename, &stats) == 0) {
+                       info("file appeared after %i loops", (timeout * WAIT_LOOP_PER_SECOND) - loop-1);
+                       return 0;
+               }
+               info("wait for %i mseconds", 1000 / WAIT_LOOP_PER_SECOND);
+               usleep(1000 * 1000 / WAIT_LOOP_PER_SECOND);
+       }
+       err("waiting for '%s' failed", filename);
+       return -1;
 }
 
 static void apply_format(struct udevice *udev, char *string, size_t maxsize,
@@ -172,57 +404,136 @@ static void apply_format(struct udevice *udev, char *string, size_t maxsize,
 {
        char temp[PATH_SIZE];
        char temp2[PATH_SIZE];
-       char *tail, *pos, *cpos, *attr, *rest;
+       char *head, *tail, *pos, *cpos, *attr, *rest;
        int len;
        int i;
-       char c;
-       struct sysfs_attribute *tmpattr;
+       int count;
        unsigned int next_free_number;
        struct sysfs_class_device *class_dev_parent;
-
-       pos = string;
+       enum subst_type {
+               SUBST_UNKNOWN,
+               SUBST_DEVPATH,
+               SUBST_ID,
+               SUBST_KERNEL_NUMBER,
+               SUBST_KERNEL_NAME,
+               SUBST_MAJOR,
+               SUBST_MINOR,
+               SUBST_RESULT,
+               SUBST_SYSFS,
+               SUBST_ENUM,
+               SUBST_PARENT,
+               SUBST_TEMP_NODE,
+               SUBST_ROOT,
+               SUBST_MODALIAS,
+               SUBST_ENV,
+       };
+       static const struct subst_map {
+               char *name;
+               char fmt;
+               enum subst_type type;
+       } map[] = {
+               { .name = "devpath",            .fmt = 'p',     .type = SUBST_DEVPATH },
+               { .name = "id",                 .fmt = 'b',     .type = SUBST_ID },
+               { .name = "number",             .fmt = 'n',     .type = SUBST_KERNEL_NUMBER },
+               { .name = "kernel",             .fmt = 'k',     .type = SUBST_KERNEL_NAME },
+               { .name = "major",              .fmt = 'M',     .type = SUBST_MAJOR },
+               { .name = "minor",              .fmt = 'm',     .type = SUBST_MINOR },
+               { .name = "result",             .fmt = 'c',     .type = SUBST_RESULT },
+               { .name = "sysfs",              .fmt = 's',     .type = SUBST_SYSFS },
+               { .name = "enum",               .fmt = 'e',     .type = SUBST_ENUM },
+               { .name = "parent",             .fmt = 'P',     .type = SUBST_PARENT },
+               { .name = "tempnode",           .fmt = 'N',     .type = SUBST_TEMP_NODE },
+               { .name = "root",               .fmt = 'r',     .type = SUBST_ROOT },
+               { .name = "modalias",           .fmt = 'A',     .type = SUBST_MODALIAS },
+               { .name = "env",                .fmt = 'E',     .type = SUBST_ENV },
+               { NULL, '\0', 0 }
+       };
+       enum subst_type type;
+       const struct subst_map *subst;
+
+       head = string;
        while (1) {
-               pos = strchr(pos, '%');
-               if (pos == NULL)
-                       break;
-
-               pos[0] = '\0';
-               tail = pos+1;
-               len = get_format_len(&tail);
-               c = tail[0];
-               strlcpy(temp, tail+1, sizeof(temp));
-               tail = temp;
-               dbg("format=%c, string='%s', tail='%s'",c , string, tail);
+               len = -1;
+               while (head[0] != '\0') {
+                       if (head[0] == '$') {
+                               /* substitute named variable */
+                               if (head[1] == '\0')
+                                       break;
+                               if (head[1] == '$') {
+                                       strlcpy(temp, head+2, sizeof(temp));
+                                       strlcpy(head+1, temp, maxsize);
+                                       head++;
+                                       continue;
+                               }
+                               head[0] = '\0';
+                               for (subst = map; subst->name; subst++) {
+                                       if (strncasecmp(&head[1], subst->name, strlen(subst->name)) == 0) {
+                                               type = subst->type;
+                                               tail = head + strlen(subst->name)+1;
+                                               dbg("will substitute format name '%s'", subst->name);
+                                               goto found;
+                                       }
+                               }
+                       }
+                       else if (head[0] == '%') {
+                               /* substitute format char */
+                               if (head[1] == '\0')
+                                       break;
+                               if (head[1] == '%') {
+                                       strlcpy(temp, head+2, sizeof(temp));
+                                       strlcpy(head+1, temp, maxsize);
+                                       head++;
+                                       continue;
+                               }
+                               head[0] = '\0';
+                               tail = head+1;
+                               len = get_format_len(&tail);
+                               for (subst = map; subst->name; subst++) {
+                                       if (tail[0] == subst->fmt) {
+                                               type = subst->type;
+                                               tail++;
+                                               dbg("will substitute format char '%c'", subst->fmt);
+                                               goto found;
+                                       }
+                               }
+                       }
+                       head++;
+               }
+               break;
+found:
                attr = get_format_attribute(&tail);
+               strlcpy(temp, tail, sizeof(temp));
+               dbg("format=%i, string='%s', tail='%s', class_dev=%p, sysfs_dev=%p",
+                   type ,string, tail, class_dev, sysfs_device);
 
-               switch (c) {
-               case 'p':
+               switch (type) {
+               case SUBST_DEVPATH:
                        strlcat(string, udev->devpath, maxsize);
-                       dbg("substitute kernel name '%s'", udev->kernel_name);
+                       dbg("substitute devpath '%s'", udev->devpath);
                        break;
-               case 'b':
+               case SUBST_ID:
                        strlcat(string, udev->bus_id, maxsize);
                        dbg("substitute bus_id '%s'", udev->bus_id);
                        break;
-               case 'k':
+               case SUBST_KERNEL_NAME:
                        strlcat(string, udev->kernel_name, maxsize);
                        dbg("substitute kernel name '%s'", udev->kernel_name);
                        break;
-               case 'n':
+               case SUBST_KERNEL_NUMBER:
                        strlcat(string, udev->kernel_number, maxsize);
                        dbg("substitute kernel number '%s'", udev->kernel_number);
-                               break;
-               case 'm':
-                       sprintf(temp2, "%d", minor(udev->devt));
-                       strlcat(string, temp2, maxsize);
-                       dbg("substitute minor number '%s'", temp2);
                        break;
-               case 'M':
+               case SUBST_MAJOR:
                        sprintf(temp2, "%d", major(udev->devt));
                        strlcat(string, temp2, maxsize);
                        dbg("substitute major number '%s'", temp2);
                        break;
-               case 'c':
+               case SUBST_MINOR:
+                       sprintf(temp2, "%d", minor(udev->devt));
+                       strlcat(string, temp2, maxsize);
+                       dbg("substitute minor number '%s'", temp2);
+                       break;
+               case SUBST_RESULT:
                        if (udev->program_result[0] == '\0')
                                break;
                        /* get part part of the result string */
@@ -239,7 +550,7 @@ static void apply_format(struct udevice *udev, char *string, size_t maxsize,
                                                cpos++;
                                }
                                if (i > 0) {
-                                       dbg("requested part of result string not found");
+                                       err("requested part of result string not found");
                                        break;
                                }
                                strlcpy(temp2, cpos, sizeof(temp2));
@@ -256,44 +567,43 @@ static void apply_format(struct udevice *udev, char *string, size_t maxsize,
                                dbg("substitute result string '%s'", udev->program_result);
                        }
                        break;
-               case 's':
-                       if (!class_dev)
-                               break;
+               case SUBST_SYSFS:
                        if (attr == NULL) {
                                dbg("missing attribute");
                                break;
                        }
-                       tmpattr = find_sysfs_attribute(class_dev, sysfs_device, attr);
-                       if (tmpattr == NULL) {
-                               dbg("sysfa attribute '%s' not found", attr);
-                               break;
-                       }
-                       /* strip trailing whitespace of matching value */
-                       if (isspace(tmpattr->value[strlen(tmpattr->value)-1])) {
-                               i = len = strlen(tmpattr->value);
-                               while (i > 0 &&  isspace(tmpattr->value[i-1]))
-                                       i--;
-                               if (i < len) {
-                                       tmpattr->value[i] = '\0';
-                                       dbg("remove %i trailing whitespace chars from '%s'",
-                                                len - i, tmpattr->value);
+                       if (find_sysfs_attribute(class_dev, sysfs_device, attr, temp2, sizeof(temp2)) != 0) {
+                               struct sysfs_device *parent_device;
+
+                               dbg("sysfs attribute '%s' not found, walk up the physical devices", attr);
+                               parent_device = sysfs_get_device_parent(sysfs_device);
+                               while (parent_device) {
+                                       dbg("looking at '%s'", parent_device->path);
+                                       if (find_sysfs_attribute(NULL, parent_device, attr, temp2, sizeof(temp2)) == 0)
+                                               break;
+                                       parent_device = sysfs_get_device_parent(parent_device);
                                }
+                               if (!parent_device)
+                                       break;
                        }
-                       strlcat(string, tmpattr->value, maxsize);
-                       dbg("substitute sysfs value '%s'", tmpattr->value);
-                       break;
-               case '%':
-                       strlcat(string, "%", maxsize);
-                       pos++;
+                       /* strip trailing whitespace of sysfs value */
+                       i = strlen(temp2);
+                       while (i > 0 && isspace(temp2[i-1]))
+                               temp2[--i] = '\0';
+                       count = replace_untrusted_chars(temp2);
+                       if (count)
+                               info("%i untrusted character(s) replaced" , count);
+                       strlcat(string, temp2, maxsize);
+                       dbg("substitute sysfs value '%s'", temp2);
                        break;
-               case 'e':
-                       next_free_number = find_free_number(udev, string);
+               case SUBST_ENUM:
+                       next_free_number = find_free_number(string, udev->devpath);
                        if (next_free_number > 0) {
                                sprintf(temp2, "%d", next_free_number);
                                strlcat(string, temp2, maxsize);
                        }
                        break;
-               case 'P':
+               case SUBST_PARENT:
                        if (!class_dev)
                                break;
                        class_dev_parent = sysfs_get_classdev_parent(class_dev);
@@ -301,7 +611,7 @@ static void apply_format(struct udevice *udev, char *string, size_t maxsize,
                                struct udevice udev_parent;
 
                                dbg("found parent '%s', get the node name", class_dev_parent->path);
-                               udev_init_device(&udev_parent, NULL, NULL);
+                               udev_init_device(&udev_parent, NULL, NULL, NULL);
                                /* lookup the name in the udev_db with the DEVPATH of the parent */
                                if (udev_db_get_device(&udev_parent, &class_dev_parent->path[strlen(sysfs_path)]) == 0) {
                                        strlcat(string, udev_parent.name, maxsize);
@@ -311,7 +621,7 @@ static void apply_format(struct udevice *udev, char *string, size_t maxsize,
                                udev_cleanup_device(&udev_parent);
                        }
                        break;
-               case 'N':
+               case SUBST_TEMP_NODE:
                        if (udev->tmp_node[0] == '\0') {
                                dbg("create temporary device node for callout");
                                snprintf(udev->tmp_node, sizeof(udev->tmp_node), "%s/.tmp-%u-%u",
@@ -322,383 +632,307 @@ static void apply_format(struct udevice *udev, char *string, size_t maxsize,
                        strlcat(string, udev->tmp_node, maxsize);
                        dbg("substitute temporary device node name '%s'", udev->tmp_node);
                        break;
-               case 'r':
+               case SUBST_ROOT:
                        strlcat(string, udev_root, maxsize);
                        dbg("substitute udev_root '%s'", udev_root);
                        break;
+               case SUBST_MODALIAS:
+                       if (find_sysfs_attribute(NULL, sysfs_device, "modalias", temp2, sizeof(temp2)) != 0)
+                               break;
+                       strlcat(string, temp2, maxsize);
+                       dbg("substitute MODALIAS '%s'", temp2);
+                       break;
+               case SUBST_ENV:
+                       if (attr == NULL) {
+                               dbg("missing attribute");
+                               break;
+                       }
+                       pos = getenv(attr);
+                       if (pos == NULL) {
+                               dbg("env '%s' not available", attr);
+                               break;
+                       }
+                       dbg("substitute env '%s=%s'", attr, pos);
+                       strlcat(string, pos, maxsize);
+                       break;
                default:
-                       dbg("unknown substitution type '%%%c'", c);
+                       err("unknown substitution type=%i", type);
                        break;
                }
-               /* truncate to specified length */
-               if (len > 0)
-                       pos[len] = '\0';
-
-               strlcat(string, tail, maxsize);
+               /* possibly truncate to format-char specified length */
+               if (len != -1) {
+                       head[len] = '\0';
+                       dbg("truncate to %i chars, subtitution string becomes '%s'", len, head);
+               }
+               strlcat(string, temp, maxsize);
        }
 }
 
-static int execute_program(struct udevice *udev, const char *path, char *value, int len)
+static char *key_val(struct udev_rule *rule, struct key *key)
 {
-       int retval;
-       int count;
-       int status;
-       int fds[2];
-       pid_t pid;
-       char *pos;
-       char arg[PATH_SIZE];
-       char *argv[(sizeof(arg) / 2) + 1];
-       int i;
+       return rule->buf + key->val_off;
+}
 
-       strlcpy(arg, path, sizeof(arg));
-       i = 0;
-       if (strchr(path, ' ')) {
-               pos = arg;
-               while (pos != NULL) {
-                       if (pos[0] == '\'') {
-                               /* don't separate if in apostrophes */
-                               pos++;
-                               argv[i] = strsep(&pos, "\'");
-                               while (pos && pos[0] == ' ')
-                                       pos++;
-                       } else {
-                               argv[i] = strsep(&pos, " ");
-                       }
-                       dbg("arg[%i] '%s'", i, argv[i]);
-                       i++;
-               }
-               argv[i] =  NULL;
-               dbg("execute '%s' with parsed arguments", arg);
-       } else {
-               argv[0] = arg;
-               argv[1] = udev->subsystem;
-               argv[2] = NULL;
-               dbg("execute '%s' with subsystem '%s' argument", arg, argv[1]);
-       }
+static char *key_pair_name(struct udev_rule *rule, struct key_pair *pair)
+{
+       return rule->buf + pair->key_name_off;
+}
 
-       retval = pipe(fds);
-       if (retval != 0) {
-               dbg("pipe failed");
-               return -1;
-       }
+static int match_key(const char *key_name, struct udev_rule *rule, struct key *key, const char *val)
+{
+       int match;
+       char value[PATH_SIZE];
+       char *key_value;
+       char *pos;
 
-       pid = fork();
-       switch(pid) {
-       case 0:
-               /* child */
-               /* dup2 write side of pipe to STDOUT */
-               dup2(fds[1], STDOUT_FILENO);
-               retval = execv(arg, argv);
-
-               info(KEY_PROGRAM " execution of '%s' failed", path);
-               exit(1);
-       case -1:
-               dbg("fork failed");
-               return -1;
-       default:
-               /* parent reads from fds[0] */
-               close(fds[1]);
-               retval = 0;
-               i = 0;
-               while (1) {
-                       count = read(fds[0], value + i, len - i-1);
-                       if (count <= 0)
-                               break;
+       if (key->operation == KEY_OP_UNSET)
+               return 0;
 
-                       i += count;
-                       if (i >= len-1) {
-                               dbg("result len %d too short", len);
-                               retval = -1;
-                               break;
-                       }
-               }
+       strlcpy(value, rule->buf + key->val_off, sizeof(value));
+       key_value = value;
 
-               if (count < 0) {
-                       dbg("read failed with '%s'", strerror(errno));
-                       retval = -1;
+       dbg("key %s value='%s'", key_name, key_value);
+       while (key_value) {
+               pos = strchr(key_value, '|');
+               if (pos) {
+                       pos[0] = '\0';
+                       pos++;
                }
-
-               if (i > 0 && value[i-1] == '\n')
-                       i--;
-               value[i] = '\0';
-               dbg("result is '%s'", value);
-
-               close(fds[0]);
-               waitpid(pid, &status, 0);
-
-               if (!WIFEXITED(status) || (WEXITSTATUS(status) != 0)) {
-                       dbg("exec program status 0x%x", status);
-                       retval = -1;
+               dbg("match %s '%s' <-> '%s'", key_name, key_value, val);
+               match = (strcmp_pattern(key_value, val) == 0);
+               if (match && (key->operation != KEY_OP_NOMATCH)) {
+                       dbg("%s is true (matching value)", key_name);
+                       return 0;
+               }
+               if (!match && (key->operation == KEY_OP_NOMATCH)) {
+                       dbg("%s is true (non-matching value)", key_name);
+                       return 0;
                }
+               key_value = pos;
        }
-       return retval;
+       dbg("%s is false", key_name);
+       return -1;
 }
 
-static struct sysfs_attribute *find_sysfs_attribute(struct sysfs_class_device *class_dev, struct sysfs_device *sysfs_device, char *attr)
+/* match a single rule against a given device and possibly its parent devices */
+static int match_rule(struct udevice *udev, struct udev_rule *rule,
+                     struct sysfs_class_device *class_dev, struct sysfs_device *sysfs_device)
 {
-       struct sysfs_attribute *tmpattr = NULL;
-       char *c;
-
-       dbg("look for device attribute '%s'", attr);
-       /* try to find the attribute in the class device directory */
-       tmpattr = sysfs_get_classdev_attr(class_dev, attr);
-       if (tmpattr)
-               goto attr_found;
-
-       /* look in the class device directory if present */
-       if (sysfs_device) {
-               tmpattr = sysfs_get_device_attr(sysfs_device, attr);
-               if (tmpattr)
-                       goto attr_found;
-       }
+       struct sysfs_device *parent_device = sysfs_device;
+       int i;
 
-       return NULL;
+       if (match_key("ACTION", rule, &rule->action, udev->action))
+               goto exit;
 
-attr_found:
-       c = strchr(tmpattr->value, '\n');
-       if (c != NULL)
-               c[0] = '\0';
+       if (match_key("KERNEL", rule, &rule->kernel_name, udev->kernel_name))
+               goto exit;
 
-       dbg("found attribute '%s'", tmpattr->path);
-       return tmpattr;
-}
+       if (match_key("SUBSYSTEM", rule, &rule->subsystem, udev->subsystem))
+               goto exit;
 
-static int compare_sysfs_attribute(struct sysfs_class_device *class_dev, struct sysfs_device *sysfs_device, struct key_pair *pair)
-{
-       struct sysfs_attribute *tmpattr;
-       int i;
-       int len;
-
-       if ((pair == NULL) || (pair->name[0] == '\0') || (pair->value == '\0'))
-               return -ENODEV;
+       if (match_key("DEVPATH", rule, &rule->devpath, udev->devpath))
+               goto exit;
 
-       tmpattr = find_sysfs_attribute(class_dev, sysfs_device, pair->name);
-       if (tmpattr == NULL)
-               return -ENODEV;
+       if (rule->modalias.operation != KEY_OP_UNSET) {
+               char value[NAME_SIZE];
 
-       /* strip trailing whitespace of value, if not asked to match for it */
-       if (! isspace(pair->value[strlen(pair->value)-1])) {
-               i = len = strlen(tmpattr->value);
-               while (i > 0 &&  isspace(tmpattr->value[i-1]))
-                       i--;
-               if (i < len) {
-                       tmpattr->value[i] = '\0';
-                       dbg("remove %i trailing whitespace chars from '%s'",
-                           len - i, tmpattr->value);
+               if (find_sysfs_attribute(NULL, sysfs_device, "modalias", value, sizeof(value)) != 0) {
+                       dbg("MODALIAS value not found");
+                       goto exit;
                }
+               if (match_key("MODALIAS", rule, &rule->modalias, value))
+                       goto exit;
        }
 
-       dbg("compare attribute '%s' value '%s' with '%s'",
-                 pair->name, tmpattr->value, pair->value);
-       if (strcmp_pattern(pair->value, tmpattr->value) != 0)
-               return -ENODEV;
+       for (i = 0; i < rule->env.count; i++) {
+               struct key_pair *pair = &rule->env.keys[i];
 
-       dbg("found matching attribute '%s' with value '%s'",
-           pair->name, pair->value);
-       return 0;
-}
+               /* we only check for matches, assignments will be handled later */
+               if (pair->key.operation != KEY_OP_ASSIGN) {
+                       const char *key_name = key_pair_name(rule, pair);
+                       const char *value = getenv(key_name);
 
-static int match_rule(struct udevice *udev, struct udev_rule *rule,
-                     struct sysfs_class_device *class_dev, struct sysfs_device *sysfs_device)
-{
-       if (rule->kernel[0] != '\0') {
-               dbg("check for " KEY_KERNEL " rule->kernel='%s' class_dev->name='%s'",
-                   rule->kernel, class_dev->name);
-               if (strcmp_pattern(rule->kernel, class_dev->name) != 0) {
-                       dbg(KEY_KERNEL " is not matching");
-                       if (rule->kernel_operation != KEY_OP_NOMATCH)
-                               goto exit;
-               } else {
-                       dbg(KEY_KERNEL " matches");
-                       if (rule->kernel_operation == KEY_OP_NOMATCH)
-                               goto exit;
-               }
-               dbg(KEY_KERNEL " key is true");
-       }
-
-       if (rule->subsystem[0] != '\0') {
-               dbg("check for " KEY_SUBSYSTEM " rule->subsystem='%s' class_dev->name='%s'",
-                   rule->subsystem, class_dev->name);
-               if (strcmp_pattern(rule->subsystem, udev->subsystem) != 0) {
-                       dbg(KEY_SUBSYSTEM " is not matching");
-                       if (rule->subsystem_operation != KEY_OP_NOMATCH)
-                               goto exit;
-               } else {
-                       dbg(KEY_SUBSYSTEM " matches");
-                       if (rule->subsystem_operation == KEY_OP_NOMATCH)
+                       if (!value) {
+                               dbg("ENV{'%s'} is not set, treat as empty", key_name);
+                               value = "";
+                       }
+                       if (match_key("ENV", rule, &pair->key, value))
                                goto exit;
                }
-               dbg(KEY_SUBSYSTEM " key is true");
        }
 
-       if (rule->env_pair_count) {
-               int i;
-
-               dbg("check for " KEY_ENV " pairs");
-               for (i = 0; i < rule->env_pair_count; i++) {
-                       struct key_pair *pair;
-                       const char *value;
+       if (rule->wait_for_sysfs.operation != KEY_OP_UNSET) {
+               int match;
 
-                       pair = &rule->env_pair[i];
-                       value = getenv(pair->name);
-                       if (!value) {
-                               dbg(KEY_ENV "{'%s'} is not found", pair->name);
-                               goto exit;
-                       }
-                       if (strcmp_pattern(pair->value, value) != 0) {
-                               dbg(KEY_ENV "{'%s'} is not matching", pair->name);
-                               if (pair->operation != KEY_OP_NOMATCH)
-                                       goto exit;
-                       } else {
-                               dbg(KEY_ENV "{'%s'} matches", pair->name);
-                               if (pair->operation == KEY_OP_NOMATCH)
-                                       goto exit;
-                       }
+               match = (wait_for_sysfs(udev, key_val(rule, &rule->wait_for_sysfs), 3) == 0);
+               if (match && (rule->wait_for_sysfs.operation != KEY_OP_NOMATCH)) {
+                       dbg("WAIT_FOR_SYSFS is true (matching value)");
+                       return 0;
+               }
+               if (!match && (rule->wait_for_sysfs.operation == KEY_OP_NOMATCH)) {
+                       dbg("WAIT_FOR_SYSFS is true, (non matching value)");
+                       return 0;
                }
-               dbg(KEY_ENV " key is true");
+               dbg("WAIT_FOR_SYSFS is false");
+               return -1;
        }
 
        /* walk up the chain of physical devices and find a match */
        while (1) {
                /* check for matching driver */
-               if (rule->driver[0] != '\0') {
-                       if (sysfs_device == NULL) {
+               if (rule->driver.operation != KEY_OP_UNSET) {
+                       if (parent_device == NULL) {
                                dbg("device has no sysfs_device");
-                               goto try_parent;
-                       }
-                       dbg("check for " KEY_DRIVER " rule->driver='%s' sysfs_device->driver_name='%s'",
-                           rule->driver, sysfs_device->driver_name);
-                       if (strcmp_pattern(rule->driver, sysfs_device->driver_name) != 0) {
-                               dbg(KEY_DRIVER " is not matching");
-                               if (rule->driver_operation != KEY_OP_NOMATCH)
-                                       goto try_parent;
-                       } else {
-                               dbg(KEY_DRIVER " matches");
-                               if (rule->driver_operation == KEY_OP_NOMATCH)
-                                       goto try_parent;
+                               goto exit;
                        }
-                       dbg(KEY_DRIVER " key is true");
+                       if (match_key("DRIVER", rule, &rule->driver, parent_device->driver_name))
+                               goto try_parent;
                }
 
                /* check for matching bus value */
-               if (rule->bus[0] != '\0') {
-                       if (sysfs_device == NULL) {
+               if (rule->bus.operation != KEY_OP_UNSET) {
+                       if (parent_device == NULL) {
                                dbg("device has no sysfs_device");
-                               goto try_parent;
-                       }
-                       dbg("check for " KEY_BUS " rule->bus='%s' sysfs_device->bus='%s'",
-                           rule->bus, sysfs_device->bus);
-                       if (strcmp_pattern(rule->bus, sysfs_device->bus) != 0) {
-                               dbg(KEY_BUS " is not matching");
-                               if (rule->bus_operation != KEY_OP_NOMATCH)
-                                       goto try_parent;
-                       } else {
-                               dbg(KEY_BUS " matches");
-                               if (rule->bus_operation == KEY_OP_NOMATCH)
-                                       goto try_parent;
+                               goto exit;
                        }
-                       dbg(KEY_BUS " key is true");
+                       if (match_key("BUS", rule, &rule->bus, parent_device->bus))
+                               goto try_parent;
                }
 
                /* check for matching bus id */
-               if (rule->id[0] != '\0') {
-                       if (sysfs_device == NULL) {
+               if (rule->id.operation != KEY_OP_UNSET) {
+                       if (parent_device == NULL) {
                                dbg("device has no sysfs_device");
-                               goto try_parent;
-                       }
-                       dbg("check " KEY_ID);
-                       if (strcmp_pattern(rule->id, sysfs_device->bus_id) != 0) {
-                               dbg(KEY_ID " is not matching");
-                               if (rule->id_operation != KEY_OP_NOMATCH)
-                                       goto try_parent;
-                       } else {
-                               dbg(KEY_ID " matches");
-                               if (rule->id_operation == KEY_OP_NOMATCH)
-                                       goto try_parent;
+                               goto exit;
                        }
-                       dbg(KEY_ID " key is true");
+                       if (match_key("ID", rule, &rule->id, parent_device->bus_id))
+                               goto try_parent;
                }
 
                /* check for matching sysfs pairs */
-               if (rule->sysfs_pair_count) {
-                       int i;
-
-                       dbg("check " KEY_SYSFS " pairs");
-                       for (i = 0; i < rule->sysfs_pair_count; i++) {
-                               struct key_pair *pair;
-
-                               pair = &rule->sysfs_pair[i];
-                               if (compare_sysfs_attribute(class_dev, sysfs_device, pair) != 0) {
-                                       dbg(KEY_SYSFS "{'%s'} is not matching", pair->name);
-                                       if (pair->operation != KEY_OP_NOMATCH)
-                                               goto try_parent;
-                               } else {
-                                       dbg(KEY_SYSFS "{'%s'} matches", pair->name);
-                                       if (pair->operation == KEY_OP_NOMATCH)
-                                               goto try_parent;
+               if (rule->sysfs.count) {
+                       dbg("check %i SYSFS keys", rule->sysfs.count);
+                       for (i = 0; i < rule->sysfs.count; i++) {
+                               struct key_pair *pair = &rule->sysfs.keys[i];
+                               const char *key_name = key_pair_name(rule, pair);
+                               const char *key_value = key_val(rule, &pair->key);
+                               char value[VALUE_SIZE];
+                               size_t len;
+
+                               if (find_sysfs_attribute(class_dev, parent_device, key_name, value, sizeof(value)) != 0)
+                                       goto try_parent;
+
+                               /* strip trailing whitespace of value, if not asked to match for it */
+                               len = strlen(key_value);
+                               if (len && !isspace(key_value[len-1])) {
+                                       len = strlen(value);
+                                       while (len > 0 && isspace(value[len-1]))
+                                               value[--len] = '\0';
+                                       dbg("removed %zi trailing whitespace chars from '%s'", strlen(value)-len, value);
                                }
+
+                               if (match_key("SYSFS", rule, &pair->key, value))
+                                       goto try_parent;
                        }
-                       dbg(KEY_SYSFS " keys are true");
+                       dbg("all %i SYSFS keys matched", rule->sysfs.count);
                }
 
                /* found matching physical device  */
                break;
 try_parent:
                dbg("try parent sysfs device");
-               sysfs_device = sysfs_get_device_parent(sysfs_device);
-               if (sysfs_device == NULL)
+               parent_device = sysfs_get_device_parent(parent_device);
+               if (parent_device == NULL)
                        goto exit;
-               dbg("sysfs_device->path='%s'", sysfs_device->path);
-               dbg("sysfs_device->bus_id='%s'", sysfs_device->bus_id);
+               dbg("look at sysfs_device->path='%s'", parent_device->path);
+               dbg("look at sysfs_device->bus_id='%s'", parent_device->bus_id);
        }
 
        /* execute external program */
-       if (rule->program[0] != '\0') {
+       if (rule->program.operation != KEY_OP_UNSET) {
                char program[PATH_SIZE];
+               char result[PATH_SIZE];
 
-               dbg("check " KEY_PROGRAM);
-               strlcpy(program, rule->program, sizeof(program));
+               strlcpy(program, key_val(rule, &rule->program), sizeof(program));
                apply_format(udev, program, sizeof(program), class_dev, sysfs_device);
-               if (execute_program(udev, program, udev->program_result, sizeof(udev->program_result)) != 0) {
-                       dbg(KEY_PROGRAM " returned nonzero");
-                       if (rule->program_operation != KEY_OP_NOMATCH)
+               if (run_program(program, udev->subsystem, result, sizeof(result), NULL, (udev_log_priority >= LOG_INFO)) != 0) {
+                       dbg("PROGRAM is false");
+                       udev->program_result[0] = '\0';
+                       if (rule->program.operation != KEY_OP_NOMATCH)
                                goto exit;
                } else {
-                       dbg(KEY_PROGRAM " returned successful");
-                       if (rule->program_operation == KEY_OP_NOMATCH)
+                       int count;
+
+                       dbg("PROGRAM matches");
+                       remove_trailing_chars(result, '\n');
+                       count = replace_untrusted_chars(result);
+                       if (count)
+                               info("%i untrusted character(s) replaced" , count);
+                       dbg("result is '%s'", result);
+                       strlcpy(udev->program_result, result, sizeof(udev->program_result));
+                       dbg("PROGRAM returned successful");
+                       if (rule->program.operation == KEY_OP_NOMATCH)
                                goto exit;
                }
-               dbg(KEY_PROGRAM " key is true");
+               dbg("PROGRAM key is true");
        }
 
        /* check for matching result of external program */
-       if (rule->result[0] != '\0') {
-               dbg("check for " KEY_RESULT " rule->result='%s', udev->program_result='%s'",
-                  rule->result, udev->program_result);
-               if (strcmp_pattern(rule->result, udev->program_result) != 0) {
-                       dbg(KEY_RESULT " is not matching");
-                       if (rule->result_operation != KEY_OP_NOMATCH)
-                               goto exit;
-               } else {
-                       dbg(KEY_RESULT " matches");
-                       if (rule->result_operation == KEY_OP_NOMATCH)
+       if (match_key("RESULT", rule, &rule->result, udev->program_result))
+               goto exit;
+
+       /* import variables returned from program or or file into environment */
+       if (rule->import.operation != KEY_OP_UNSET) {
+               char import[PATH_SIZE];
+               int rc = -1;
+
+               strlcpy(import, key_val(rule, &rule->import), sizeof(import));
+               apply_format(udev, import, sizeof(import), class_dev, sysfs_device);
+               dbg("check for IMPORT import='%s'", import);
+               if (rule->import_type == IMPORT_PROGRAM) {
+                       rc = import_program_into_env(udev, import);
+               } else if (rule->import_type == IMPORT_FILE) {
+                       dbg("import file import='%s'", import);
+                       rc = import_file_into_env(udev, import);
+               } else if (rule->import_type == IMPORT_PARENT && class_dev) {
+                       dbg("import parent import='%s'", import);
+                       rc = import_parent_into_env(udev, class_dev, import);
+               }
+               if (rc) {
+                       dbg("IMPORT failed");
+                       if (rule->import.operation != KEY_OP_NOMATCH)
                                goto exit;
+               } else
+                       dbg("IMPORT '%s' imported", key_val(rule, &rule->import));
+               dbg("IMPORT key is true");
+       }
+
+       /* rule matches, if we have ENV assignments export it */
+       for (i = 0; i < rule->env.count; i++) {
+               struct key_pair *pair = &rule->env.keys[i];
+
+               if (pair->key.operation == KEY_OP_ASSIGN) {
+                       const char *key_name = key_pair_name(rule, pair);
+                       const char *value = key_val(rule, &pair->key);
+
+                       name_list_key_add(&udev->env_list, key_name, value);
+                       setenv(key_name, value, 1);
+                       dbg("export ENV '%s=%s'", key_name, value);
                }
-               dbg(KEY_RESULT " key is true");
        }
 
-       /* rule matches */
        return 0;
 
 exit:
        return -1;
 }
 
-int udev_rules_get_name(struct udevice *udev, struct sysfs_class_device *class_dev)
+int udev_rules_get_name(struct udev_rules *rules, struct udevice *udev, struct sysfs_class_device *class_dev)
 {
        struct sysfs_class_device *class_dev_parent;
        struct sysfs_device *sysfs_device = NULL;
        struct udev_rule *rule;
+       int name_set = 0;
 
        dbg("class_dev->name='%s'", class_dev->name);
 
@@ -724,15 +958,24 @@ int udev_rules_get_name(struct udevice *udev, struct sysfs_class_device *class_d
        dbg("udev->kernel_name='%s'", udev->kernel_name);
 
        /* look for a matching rule to apply */
-       list_for_each_entry(rule, &udev_rule_list, node) {
+       udev_rules_iter_init(rules);
+       while (1) {
+               rule = udev_rules_iter_next(rules);
+               if (rule == NULL)
+                       break;
+
+               if (name_set && rule->name.operation != KEY_OP_UNSET) {
+                       dbg("node name already set, rule ignored");
+                       continue;
+               }
+
                dbg("process rule");
                if (match_rule(udev, rule, class_dev, sysfs_device) == 0) {
-
                        /* apply options */
                        if (rule->ignore_device) {
-                               info("configured rule in '%s[%i]' applied, '%s' is ignored",
-                                    rule->config_file, rule->config_line, udev->kernel_name);
-                               return -1;
+                               info("rule applied, '%s' is ignored", udev->kernel_name);
+                               udev->ignore_device = 1;
+                               return 0;
                        }
                        if (rule->ignore_remove) {
                                udev->ignore_remove = 1;
@@ -745,60 +988,95 @@ int udev_rules_get_name(struct udevice *udev, struct sysfs_class_device *class_d
                        }
 
                        /* apply permissions */
-                       if (rule->mode != 0000) {
+                       if (!udev->mode_final && rule->mode != 0000) {
+                               if (rule->mode_operation == KEY_OP_ASSIGN_FINAL)
+                                       udev->mode_final = 1;
                                udev->mode = rule->mode;
-                               dbg("applied mode=%#o to '%s'", udev->mode, udev->kernel_name);
+                               dbg("applied mode=%#o to '%s'", rule->mode, udev->kernel_name);
                        }
-                       if (rule->owner[0] != '\0') {
-                               strlcpy(udev->owner, rule->owner, sizeof(udev->owner));
+                       if (!udev->owner_final && rule->owner.operation != KEY_OP_UNSET) {
+                               if (rule->owner.operation == KEY_OP_ASSIGN_FINAL)
+                                       udev->owner_final = 1;
+                               strlcpy(udev->owner, key_val(rule, &rule->owner), sizeof(udev->owner));
                                apply_format(udev, udev->owner, sizeof(udev->owner), class_dev, sysfs_device);
                                dbg("applied owner='%s' to '%s'", udev->owner, udev->kernel_name);
                        }
-                       if (rule->group[0] != '\0') {
-                               strlcpy(udev->group, rule->group, sizeof(udev->group));
+                       if (!udev->group_final && rule->group.operation != KEY_OP_UNSET) {
+                               if (rule->group.operation == KEY_OP_ASSIGN_FINAL)
+                                       udev->group_final = 1;
+                               strlcpy(udev->group, key_val(rule, &rule->group), sizeof(udev->group));
                                apply_format(udev, udev->group, sizeof(udev->group), class_dev, sysfs_device);
                                dbg("applied group='%s' to '%s'", udev->group, udev->kernel_name);
                        }
 
                        /* collect symlinks */
-                       if (rule->symlink[0] != '\0') {
+                       if (!udev->symlink_final && rule->symlink.operation != KEY_OP_UNSET) {
                                char temp[PATH_SIZE];
                                char *pos, *next;
+                               int count;
 
-                               info("configured rule in '%s[%i]' applied, added symlink '%s'",
-                                    rule->config_file, rule->config_line, rule->symlink);
-                               strlcpy(temp, rule->symlink, sizeof(temp));
+                               if (rule->symlink.operation == KEY_OP_ASSIGN_FINAL)
+                                       udev->symlink_final = 1;
+                               if (rule->symlink.operation == KEY_OP_ASSIGN || rule->symlink.operation == KEY_OP_ASSIGN_FINAL) {
+                                       info("reset symlink list");
+                                       name_list_cleanup(&udev->symlink_list);
+                               }
+                               strlcpy(temp, key_val(rule, &rule->symlink), sizeof(temp));
                                apply_format(udev, temp, sizeof(temp), class_dev, sysfs_device);
+                               count = replace_untrusted_chars(temp);
+                               if (count)
+                                       info("%i untrusted character(s) replaced" , count);
+                               dbg("rule applied, added symlink(s) '%s'", temp);
 
                                /* add multiple symlinks separated by spaces */
                                pos = temp;
-                               next = strchr(temp, ' ');
+                               while (isspace(pos[0]))
+                                       pos++;
+                               next = strchr(pos, ' ');
                                while (next) {
                                        next[0] = '\0';
-                                       dbg("add symlink '%s'", pos);
+                                       info("add symlink '%s'", pos);
                                        name_list_add(&udev->symlink_list, pos, 0);
+                                       while (isspace(next[1]))
+                                               next++;
                                        pos = &next[1];
                                        next = strchr(pos, ' ');
                                }
-                               dbg("add symlink '%s'", pos);
-                               name_list_add(&udev->symlink_list, pos, 0);
+                               if (pos[0] != '\0') {
+                                       info("add symlink '%s'", pos);
+                                       name_list_add(&udev->symlink_list, pos, 0);
+                               }
                        }
 
-                       /* rule matches */
-                       if (rule->name[0] != '\0') {
-                               info("configured rule in '%s[%i]' applied, '%s' becomes '%s'",
-                                    rule->config_file, rule->config_line, udev->kernel_name, rule->name);
-
-                               strlcpy(udev->name, rule->name, sizeof(udev->name));
+                       /* set name, later rules with name set will be ignored */
+                       if (rule->name.operation != KEY_OP_UNSET) {
+                               int count;
+                               name_set = 1;
+                               strlcpy(udev->name, key_val(rule, &rule->name), sizeof(udev->name));
                                apply_format(udev, udev->name, sizeof(udev->name), class_dev, sysfs_device);
-                               strlcpy(udev->config_file, rule->config_file, sizeof(udev->config_file));
-                               udev->config_line = rule->config_line;
+                               count = replace_untrusted_chars(udev->name);
+                               if (count)
+                                       info("%i untrusted character(s) replaced", count);
 
+                               info("rule applied, '%s' becomes '%s'", udev->kernel_name, udev->name);
                                if (udev->type != DEV_NET)
                                        dbg("name, '%s' is going to have owner='%s', group='%s', mode=%#o partitions=%i",
                                            udev->name, udev->owner, udev->group, udev->mode, udev->partitions);
+                       }
 
-                               break;
+                       if (!udev->run_final && rule->run.operation != KEY_OP_UNSET) {
+                               char program[PATH_SIZE];
+
+                               if (rule->run.operation == KEY_OP_ASSIGN_FINAL)
+                                       udev->run_final = 1;
+                               if (rule->run.operation == KEY_OP_ASSIGN || rule->run.operation == KEY_OP_ASSIGN_FINAL) {
+                                       info("reset run list");
+                                       name_list_cleanup(&udev->run_list);
+                               }
+                               strlcpy(program, key_val(rule, &rule->run), sizeof(program));
+                               apply_format(udev, program, sizeof(program), class_dev, sysfs_device);
+                               dbg("add run '%s'", program);
+                               name_list_add(&udev->run_list, program, 0);
                        }
 
                        if (rule->last_rule) {
@@ -806,13 +1084,16 @@ int udev_rules_get_name(struct udevice *udev, struct sysfs_class_device *class_d
                                break;
                        }
 
+                       if (rule->goto_label.operation != KEY_OP_UNSET) {
+                               dbg("moving forward to label '%s'", key_val(rule, &rule->goto_label));
+                               udev_rules_iter_label(rules, key_val(rule, &rule->goto_label));
+                       }
                }
        }
 
-       if (udev->name[0] == '\0') {
-               /* no rule matched, so we use the kernel name */
+       if (!name_set) {
                strlcpy(udev->name, udev->kernel_name, sizeof(udev->name));
-               dbg("no rule found, use kernel name '%s'", udev->name);
+               info("no node name set, will use kernel name '%s'", udev->name);
        }
 
        if (udev->tmp_node[0] != '\0') {
@@ -823,3 +1104,69 @@ int udev_rules_get_name(struct udevice *udev, struct sysfs_class_device *class_d
 
        return 0;
 }
+
+int udev_rules_get_run(struct udev_rules *rules, struct udevice *udev,
+                      struct sysfs_class_device *class_dev, struct sysfs_device *sysfs_dev)
+{
+       struct udev_rule *rule;
+
+       if (class_dev && !sysfs_dev)
+               sysfs_dev = sysfs_get_classdev_device(class_dev);
+       if (sysfs_dev) {
+               dbg("found devices device: path='%s', bus_id='%s', bus='%s'",
+                   sysfs_dev->path, sysfs_dev->bus_id, sysfs_dev->bus);
+               strlcpy(udev->bus_id, sysfs_dev->bus_id, sizeof(udev->bus_id));
+       }
+
+       dbg("udev->kernel_name='%s'", udev->kernel_name);
+
+       /* look for a matching rule to apply */
+       udev_rules_iter_init(rules);
+       while (1) {
+               rule = udev_rules_iter_next(rules);
+               if (rule == NULL)
+                       break;
+
+               dbg("process rule");
+               if (rule->name.operation != KEY_OP_UNSET || rule->symlink.operation != KEY_OP_UNSET ||
+                   rule->mode_operation != KEY_OP_UNSET || rule->owner.operation != KEY_OP_UNSET || rule->group.operation != KEY_OP_UNSET) {
+                       dbg("skip rule that names a device");
+                       continue;
+               }
+
+               if (match_rule(udev, rule, class_dev, sysfs_dev) == 0) {
+                       if (rule->ignore_device) {
+                               info("rule applied, '%s' is ignored", udev->kernel_name);
+                               udev->ignore_device = 1;
+                               return 0;
+                       }
+
+                       if (!udev->run_final && rule->run.operation != KEY_OP_UNSET) {
+                               char program[PATH_SIZE];
+
+                               if (rule->run.operation == KEY_OP_ASSIGN || rule->run.operation == KEY_OP_ASSIGN_FINAL) {
+                                       info("reset run list");
+                                       name_list_cleanup(&udev->run_list);
+                               }
+                               strlcpy(program, key_val(rule, &rule->run), sizeof(program));
+                               apply_format(udev, program, sizeof(program), class_dev, sysfs_dev);
+                               dbg("add run '%s'", program);
+                               name_list_add(&udev->run_list, program, 0);
+                               if (rule->run.operation == KEY_OP_ASSIGN_FINAL)
+                                       break;
+                       }
+
+                       if (rule->last_rule) {
+                               dbg("last rule to be applied");
+                               break;
+                       }
+
+                       if (rule->goto_label.operation != KEY_OP_UNSET) {
+                               dbg("moving forward to label '%s'", key_val(rule, &rule->goto_label));
+                               udev_rules_iter_label(rules, key_val(rule, &rule->goto_label));
+                       }
+               }
+       }
+
+       return 0;
+}