X-Git-Url: https://www.chiark.greenend.org.uk/ucgi/~ianmdlvl/git?p=elogind.git;a=blobdiff_plain;f=udev_rules_parse.c;h=bdaf55bd4851a21b82890067da8c422dbf5ff175;hp=c4fa142b04a21c078db43607acf7c178d68472c9;hb=2e6a862a4d0054e5370074803a6bac06aa0569b3;hpb=4110664d4f25f203b7d76ee56e5e23220b04eb69

diff --git a/udev_rules_parse.c b/udev_rules_parse.c
index c4fa142b0..bdaf55bd4 100644
--- a/udev_rules_parse.c
+++ b/udev_rules_parse.c
@@ -28,11 +28,12 @@
 
 #include "udev.h"
 #include "udev_rules.h"
+#include "udev_selinux.h"
 
 
 void udev_rules_iter_init(struct udev_rules *rules)
 {
-	dbg("bufsize=%zi", rules->bufsize);
+	dbg("bufsize=%zi\n", rules->bufsize);
 	rules->current = 0;
 }
 
@@ -43,9 +44,9 @@ struct udev_rule *udev_rules_iter_next(struct udev_rules *rules)
 	if (!rules)
 		return NULL;
 
-	dbg("current=%zi", rules->current);
+	dbg("current=%zi\n", rules->current);
 	if (rules->current >= rules->bufsize) {
-		dbg("no more rules");
+		dbg("no more rules\n");
 		return NULL;
 	}
 
@@ -61,20 +62,20 @@ struct udev_rule *udev_rules_iter_label(struct udev_rules *rules, const char *la
 	static struct udev_rule *rule;
 
 next:
-	dbg("current=%zi", rules->current);
+	dbg("current=%zi\n", rules->current);
 	if (rules->current >= rules->bufsize) {
-		dbg("no more rules");
+		dbg("no more rules\n");
 		return NULL;
 	}
 	rule = (struct udev_rule *) (rules->buf + rules->current);
 
 	if (strcmp(&rule->buf[rule->label.val_off], label) != 0) {
-		dbg("moving forward, looking for label '%s'", label);
+		dbg("moving forward, looking for label '%s'\n", label);
 		rules->current += sizeof(struct udev_rule) + rule->bufsize;
 		goto next;
 	}
 
-	dbg("found label '%s'", label);
+	dbg("found label '%s'\n", label);
 	return rule;
 }
 
@@ -122,29 +123,29 @@ static int get_key(char **line, char **key, enum key_operation *operation, char
 	if (linepos[0] == '=' && linepos[1] == '=') {
 		*operation = KEY_OP_MATCH;
 		linepos += 2;
-		dbg("operator=match");
+		dbg("operator=match\n");
 	} else if (linepos[0] == '!' && linepos[1] == '=') {
 		*operation = KEY_OP_NOMATCH;
 		linepos += 2;
-		dbg("operator=nomatch");
+		dbg("operator=nomatch\n");
 	} else if (linepos[0] == '+' && linepos[1] == '=') {
 		*operation = KEY_OP_ADD;
 		linepos += 2;
-		dbg("operator=add");
+		dbg("operator=add\n");
 	} else if (linepos[0] == '=') {
 		*operation = KEY_OP_ASSIGN;
 		linepos++;
-		dbg("operator=assign");
+		dbg("operator=assign\n");
 	} else if (linepos[0] == ':' && linepos[1] == '=') {
 		*operation = KEY_OP_ASSIGN_FINAL;
 		linepos += 2;
-		dbg("operator=assign_final");
+		dbg("operator=assign_final\n");
 	} else
 		return -1;
 
 	/* terminate key */
 	temp[0] = '\0';
-	dbg("key='%s'", *key);
+	dbg("key='%s'\n", *key);
 
 	/* skip whitespace after operator */
 	while (isspace(linepos[0]))
@@ -164,7 +165,7 @@ static int get_key(char **line, char **key, enum key_operation *operation, char
 		return -1;
 	temp[0] = '\0';
 	temp++;
-	dbg("value='%s'", *value);
+	dbg("value='%s'\n", *value);
 
 	/* move line to next key */
 	*line = temp;
@@ -183,11 +184,11 @@ static char *get_key_attribute(char *str)
 		attr++;
 		pos = strchr(attr, '}');
 		if (pos == NULL) {
-			err("missing closing brace for format");
+			err("missing closing brace for format\n");
 			return NULL;
 		}
 		pos[0] = '\0';
-		dbg("attribute='%s'", attr);
+		dbg("attribute='%s'\n", attr);
 		return attr;
 	}
 
@@ -214,7 +215,7 @@ static int add_rule_key_pair(struct udev_rule *rule, struct key_pairs *pairs,
 	size_t key_len = strnlen(key, PATH_SIZE);
 
 	if (pairs->count >= PAIRS_MAX) {
-		err("skip, too many keys of the same type in a single rule");
+		err("skip, too many keys of the same type in a single rule\n");
 		return -1;
 	}
 
@@ -244,6 +245,7 @@ static int add_to_rules(struct udev_rules *rules, char *line, const char *filena
 
 	memset(buf, 0x00, sizeof(buf));
 	rule = (struct udev_rule *) buf;
+	rule->event_timeout = -1;
 	linepos = line;
 	valid = 0;
 
@@ -260,7 +262,7 @@ static int add_to_rules(struct udev_rules *rules, char *line, const char *filena
 		if (strcasecmp(key, "ACTION") == 0) {
 			if (operation != KEY_OP_MATCH &&
 			    operation != KEY_OP_NOMATCH) {
-				err("invalid ACTION operation");
+				err("invalid ACTION operation\n");
 				goto invalid;
 			}
 			add_rule_key(rule, &rule->action, operation, value);
@@ -271,7 +273,7 @@ static int add_to_rules(struct udev_rules *rules, char *line, const char *filena
 		if (strcasecmp(key, "DEVPATH") == 0) {
 			if (operation != KEY_OP_MATCH &&
 			    operation != KEY_OP_NOMATCH) {
-				err("invalid DEVPATH operation");
+				err("invalid DEVPATH operation\n");
 				goto invalid;
 			}
 			add_rule_key(rule, &rule->devpath, operation, value);
@@ -282,7 +284,7 @@ static int add_to_rules(struct udev_rules *rules, char *line, const char *filena
 		if (strcasecmp(key, "KERNEL") == 0) {
 			if (operation != KEY_OP_MATCH &&
 			    operation != KEY_OP_NOMATCH) {
-				err("invalid KERNEL operation");
+				err("invalid KERNEL operation\n");
 				goto invalid;
 			}
 			add_rule_key(rule, &rule->kernel, operation, value);
@@ -293,7 +295,7 @@ static int add_to_rules(struct udev_rules *rules, char *line, const char *filena
 		if (strcasecmp(key, "SUBSYSTEM") == 0) {
 			if (operation != KEY_OP_MATCH &&
 			    operation != KEY_OP_NOMATCH) {
-				err("invalid SUBSYSTEM operation");
+				err("invalid SUBSYSTEM operation\n");
 				goto invalid;
 			}
 			/* bus, class, subsystem events should all be the same */
@@ -301,7 +303,7 @@ static int add_to_rules(struct udev_rules *rules, char *line, const char *filena
 			    strcmp(value, "bus") == 0 ||
 			    strcmp(value, "class") == 0) {
 				if (strcmp(value, "bus") == 0 || strcmp(value, "class") == 0)
-					err("'%s' must be specified as 'subsystem' "
+					err("'%s' must be specified as 'subsystem' \n"
 					    "please fix it in %s:%u", value, filename, lineno);
 				add_rule_key(rule, &rule->subsystem, operation, "subsystem|class|bus");
 			} else
@@ -313,7 +315,7 @@ static int add_to_rules(struct udev_rules *rules, char *line, const char *filena
 		if (strcasecmp(key, "DRIVER") == 0) {
 			if (operation != KEY_OP_MATCH &&
 			    operation != KEY_OP_NOMATCH) {
-				err("invalid DRIVER operation");
+				err("invalid DRIVER operation\n");
 				goto invalid;
 			}
 			add_rule_key(rule, &rule->driver, operation, value);
@@ -324,7 +326,7 @@ static int add_to_rules(struct udev_rules *rules, char *line, const char *filena
 		if (strncasecmp(key, "ATTR{", sizeof("ATTR{")-1) == 0) {
 			attr = get_key_attribute(key + sizeof("ATTR")-1);
 			if (attr == NULL) {
-				err("error parsing ATTR attribute");
+				err("error parsing ATTR attribute\n");
 				goto invalid;
 			}
 			if (add_rule_key_pair(rule, &rule->attr, operation, attr, value) != 0)
@@ -337,7 +339,7 @@ static int add_to_rules(struct udev_rules *rules, char *line, const char *filena
 		    strcasecmp(key, "ID") == 0) {
 			if (operation != KEY_OP_MATCH &&
 			    operation != KEY_OP_NOMATCH) {
-				err("invalid KERNELS operation");
+				err("invalid KERNELS operation\n");
 				goto invalid;
 			}
 			add_rule_key(rule, &rule->kernels, operation, value);
@@ -349,7 +351,7 @@ static int add_to_rules(struct udev_rules *rules, char *line, const char *filena
 		    strcasecmp(key, "BUS") == 0) {
 			if (operation != KEY_OP_MATCH &&
 			    operation != KEY_OP_NOMATCH) {
-				err("invalid SUBSYSTEMS operation");
+				err("invalid SUBSYSTEMS operation\n");
 				goto invalid;
 			}
 			add_rule_key(rule, &rule->subsystems, operation, value);
@@ -360,7 +362,7 @@ static int add_to_rules(struct udev_rules *rules, char *line, const char *filena
 		if (strcasecmp(key, "DRIVERS") == 0) {
 			if (operation != KEY_OP_MATCH &&
 			    operation != KEY_OP_NOMATCH) {
-				err("invalid DRIVERS operation");
+				err("invalid DRIVERS operation\n");
 				goto invalid;
 			}
 			add_rule_key(rule, &rule->drivers, operation, value);
@@ -372,19 +374,19 @@ static int add_to_rules(struct udev_rules *rules, char *line, const char *filena
 		    strncasecmp(key, "SYSFS{", sizeof("SYSFS{")-1) == 0) {
 			if (operation != KEY_OP_MATCH &&
 			    operation != KEY_OP_NOMATCH) {
-				err("invalid ATTRS operation");
+				err("invalid ATTRS operation\n");
 				goto invalid;
 			}
 			attr = get_key_attribute(key + sizeof("ATTRS")-1);
 			if (attr == NULL) {
-				err("error parsing ATTRS attribute");
+				err("error parsing ATTRS attribute\n");
 				goto invalid;
 			}
 			if (strncmp(attr, "device/", 7) == 0)
-				err("the 'device' link is deprecated and will be removed from a future kernel, "
+				err("the 'device' link is deprecated and will be removed from a future kernel, \n"
 				    "please fix it in %s:%u", filename, lineno);
 			else if (strstr(attr, "../") != NULL)
-				err("do not reference parent sysfs directories directly, that may break with a future kernel, "
+				err("do not reference parent sysfs directories directly, that may break with a future kernel, \n"
 				    "please fix it in %s:%u", filename, lineno);
 			if (add_rule_key_pair(rule, &rule->attrs, operation, attr, value) != 0)
 				goto invalid;
@@ -395,7 +397,7 @@ static int add_to_rules(struct udev_rules *rules, char *line, const char *filena
 		if (strncasecmp(key, "ENV{", sizeof("ENV{")-1) == 0) {
 			attr = get_key_attribute(key + sizeof("ENV")-1);
 			if (attr == NULL) {
-				err("error parsing ENV attribute");
+				err("error parsing ENV attribute\n");
 				goto invalid;
 			}
 			if (strncmp(attr, "PHYSDEV", 7) == 0)
@@ -415,7 +417,7 @@ static int add_to_rules(struct udev_rules *rules, char *line, const char *filena
 		if (strcasecmp(key, "RESULT") == 0) {
 			if (operation != KEY_OP_MATCH &&
 			    operation != KEY_OP_NOMATCH) {
-				err("invalid RESULT operation");
+				err("invalid RESULT operation\n");
 				goto invalid;
 			}
 			add_rule_key(rule, &rule->result, operation, value);
@@ -425,20 +427,20 @@ static int add_to_rules(struct udev_rules *rules, char *line, const char *filena
 
 		if (strncasecmp(key, "IMPORT", sizeof("IMPORT")-1) == 0) {
 			attr = get_key_attribute(key + sizeof("IMPORT")-1);
-			if (attr && strstr(attr, "program")) {
-				dbg("IMPORT will be executed");
+			if (attr != NULL && strstr(attr, "program")) {
+				dbg("IMPORT will be executed\n");
 				rule->import_type  = IMPORT_PROGRAM;
-			} else if (attr && strstr(attr, "file")) {
-				dbg("IMPORT will be included as file");
+			} else if (attr != NULL && strstr(attr, "file")) {
+				dbg("IMPORT will be included as file\n");
 				rule->import_type  = IMPORT_FILE;
-			} else if (attr && strstr(attr, "parent")) {
-				dbg("IMPORT will include the parent values");
+			} else if (attr != NULL && strstr(attr, "parent")) {
+				dbg("IMPORT will include the parent values\n");
 				rule->import_type = IMPORT_PARENT;
 			} else {
 				/* figure it out if it is executable */
 				char file[PATH_SIZE];
 				char *pos;
-				struct stat stats;
+				struct stat statbuf;
 
 				strlcpy(file, value, sizeof(file));
 				pos = strchr(file, ' ');
@@ -454,12 +456,12 @@ static int add_to_rules(struct udev_rules *rules, char *line, const char *filena
 						pos[0] = '\0';
 				}
 
-				dbg("IMPORT auto mode for '%s'", file);
-				if (!lstat(file, &stats) && (stats.st_mode & S_IXUSR)) {
-					dbg("IMPORT is executable, will be executed (autotype)");
+				dbg("IMPORT auto mode for '%s'\n", file);
+				if (!lstat(file, &statbuf) && (statbuf.st_mode & S_IXUSR)) {
+					dbg("IMPORT is executable, will be executed (autotype)\n");
 					rule->import_type  = IMPORT_PROGRAM;
 				} else {
-					dbg("IMPORT is not executable, will be included as file (autotype)");
+					dbg("IMPORT is not executable, will be included as file (autotype)\n");
 					rule->import_type  = IMPORT_FILE;
 				}
 			}
@@ -469,6 +471,11 @@ static int add_to_rules(struct udev_rules *rules, char *line, const char *filena
 		}
 
 		if (strncasecmp(key, "TEST", sizeof("TEST")-1) == 0) {
+			if (operation != KEY_OP_MATCH &&
+			    operation != KEY_OP_NOMATCH) {
+				err("invalid TEST operation\n");
+				goto invalid;
+			}
 			attr = get_key_attribute(key + sizeof("TEST")-1);
 			if (attr != NULL)
 				rule->test_mode_mask = strtol(attr, NULL, 8);
@@ -479,15 +486,17 @@ static int add_to_rules(struct udev_rules *rules, char *line, const char *filena
 
 		if (strncasecmp(key, "RUN", sizeof("RUN")-1) == 0) {
 			attr = get_key_attribute(key + sizeof("RUN")-1);
-			if (attr && strstr(attr, "ignore_error"))
-				rule->run_ignore_error = 1;
+			if (attr != NULL) {
+				if (strstr(attr, "ignore_error"))
+					rule->run_ignore_error = 1;
+			}
 			add_rule_key(rule, &rule->run, operation, value);
 			valid = 1;
 			continue;
 		}
 
-		if (strcasecmp(key, "WAIT_FOR_SYSFS") == 0) {
-			add_rule_key(rule, &rule->wait_for_sysfs, operation, value);
+		if (strcasecmp(key, "WAIT_FOR") == 0 || strcasecmp(key, "WAIT_FOR_SYSFS") == 0) {
+			add_rule_key(rule, &rule->wait_for, operation, value);
 			valid = 1;
 			continue;
 		}
@@ -508,22 +517,26 @@ static int add_to_rules(struct udev_rules *rules, char *line, const char *filena
 			attr = get_key_attribute(key + sizeof("NAME")-1);
 			if (attr != NULL) {
 				if (strstr(attr, "all_partitions") != NULL) {
-					dbg("creation of partition nodes requested");
+					dbg("creation of partition nodes requested\n");
 					rule->partitions = DEFAULT_PARTITIONS_COUNT;
 				}
 				if (strstr(attr, "ignore_remove") != NULL) {
-					dbg("remove event should be ignored");
+					dbg("remove event should be ignored\n");
 					rule->ignore_remove = 1;
 				}
 			}
 			if (value[0] == '\0')
-				dbg("name empty, node creation supressed");
+				dbg("name empty, node creation supressed\n");
 			add_rule_key(rule, &rule->name, operation, value);
 			continue;
 		}
 
 		if (strcasecmp(key, "SYMLINK") == 0) {
-			add_rule_key(rule, &rule->symlink, operation, value);
+			if (operation == KEY_OP_MATCH ||
+			    operation == KEY_OP_NOMATCH)
+				add_rule_key(rule, &rule->symlink_match, operation, value);
+			else
+				add_rule_key(rule, &rule->symlink, operation, value);
 			valid = 1;
 			continue;
 		}
@@ -536,7 +549,7 @@ static int add_to_rules(struct udev_rules *rules, char *line, const char *filena
 				if (endptr[0] != '\0') {
 					char owner[32];
 					uid_t uid = lookup_user(value);
-					dbg("replacing username='%s' by id=%i", value, uid);
+					dbg("replacing username='%s' by id=%i\n", value, uid);
 					sprintf(owner, "%u", (unsigned int) uid);
 					add_rule_key(rule, &rule->owner, operation, owner);
 					continue;
@@ -555,7 +568,7 @@ static int add_to_rules(struct udev_rules *rules, char *line, const char *filena
 				if (endptr[0] != '\0') {
 					char group[32];
 					gid_t gid = lookup_group(value);
-					dbg("replacing groupname='%s' by id=%i", value, gid);
+					dbg("replacing groupname='%s' by id=%i\n", value, gid);
 					sprintf(group, "%u", (unsigned int) gid);
 					add_rule_key(rule, &rule->group, operation, group);
 					continue;
@@ -567,8 +580,7 @@ static int add_to_rules(struct udev_rules *rules, char *line, const char *filena
 		}
 
 		if (strcasecmp(key, "MODE") == 0) {
-			rule->mode = strtol(value, NULL, 8);
-			rule->mode_operation = operation;
+			add_rule_key(rule, &rule->mode, operation, value);
 			valid = 1;
 			continue;
 		}
@@ -577,21 +589,26 @@ static int add_to_rules(struct udev_rules *rules, char *line, const char *filena
 			const char *pos;
 
 			if (strstr(value, "last_rule") != NULL) {
-				dbg("last rule to be applied");
+				dbg("last rule to be applied\n");
 				rule->last_rule = 1;
 			}
 			if (strstr(value, "ignore_device") != NULL) {
-				dbg("device should be ignored");
+				dbg("device should be ignored\n");
 				rule->ignore_device = 1;
 			}
 			if (strstr(value, "ignore_remove") != NULL) {
-				dbg("remove event should be ignored");
+				dbg("remove event should be ignored\n");
 				rule->ignore_remove = 1;
 			}
 			pos = strstr(value, "link_priority=");
 			if (pos != NULL) {
 				rule->link_priority = atoi(&pos[strlen("link_priority=")]);
-				info("link priority=%i", rule->link_priority);
+				dbg("link priority=%i\n", rule->link_priority);
+			}
+			pos = strstr(value, "event_timeout=");
+			if (pos != NULL) {
+				rule->event_timeout = atoi(&pos[strlen("event_timeout=")]);
+				dbg("event timout=%i\n", rule->event_timeout);
 			}
 			pos = strstr(value, "string_escape=");
 			if (pos != NULL) {
@@ -602,18 +619,18 @@ static int add_to_rules(struct udev_rules *rules, char *line, const char *filena
 					rule->string_escape = ESCAPE_REPLACE;
 			}
 			if (strstr(value, "all_partitions") != NULL) {
-				dbg("creation of partition nodes requested");
+				dbg("creation of partition nodes requested\n");
 				rule->partitions = DEFAULT_PARTITIONS_COUNT;
 			}
 			valid = 1;
 			continue;
 		}
 
-		err("unknown key '%s' in %s:%u", key, filename, lineno);
+		err("unknown key '%s' in %s:%u\n", key, filename, lineno);
 	}
 
-	if (physdev && rule->wait_for_sysfs.operation == KEY_OP_UNSET)
-		err("PHYSDEV* values are deprecated and will be removed from a future kernel, "
+	if (physdev && rule->wait_for.operation == KEY_OP_UNSET)
+		err("PHYSDEV* values are deprecated and will be removed from a future kernel, \n"
 		    "please fix it in %s:%u", filename, lineno);
 
 	/* skip line if not any valid key was found */
@@ -623,23 +640,23 @@ static int add_to_rules(struct udev_rules *rules, char *line, const char *filena
 	/* grow buffer and add rule */
 	rule_size = sizeof(struct udev_rule) + rule->bufsize;
 	padding = (sizeof(size_t) - rule_size % sizeof(size_t)) % sizeof(size_t);
-	dbg("add %zi padding bytes", padding);
+	dbg("add %zi padding bytes\n", padding);
 	rule_size += padding;
 	rule->bufsize += padding;
 
 	rules->buf = realloc(rules->buf, rules->bufsize + rule_size);
 	if (!rules->buf) {
-		err("realloc failed");
+		err("realloc failed\n");
 		goto exit;
 	}
-	dbg("adding rule to offset %zi", rules->bufsize);
+	dbg("adding rule to offset %zi\n", rules->bufsize);
 	memcpy(rules->buf + rules->bufsize, rule, rule_size);
 	rules->bufsize += rule_size;
 exit:
 	return 0;
 
 invalid:
-	err("invalid rule '%s:%u'", filename, lineno);
+	err("invalid rule '%s:%u'\n", filename, lineno);
 	return -1;
 }
 
@@ -655,10 +672,10 @@ static int parse_file(struct udev_rules *rules, const char *filename)
 	int retval = 0;
 
 	if (file_map(filename, &buf, &bufsize) != 0) {
-		err("can't open '%s' as rules file: %s", filename, strerror(errno));
+		err("can't open '%s' as rules file: %s\n", filename, strerror(errno));
 		return -1;
 	}
-	info("reading '%s' as rules file", filename);
+	info("reading '%s' as rules file\n", filename);
 
 	/* loop through the whole file */
 	cur = 0;
@@ -684,7 +701,7 @@ static int parse_file(struct udev_rules *rules, const char *filename)
 			continue;
 
 		if (count >= sizeof(line)) {
-			err("line too long, rule skipped '%s:%u'", filename, lineno);
+			err("line too long, rule skipped '%s:%u'\n", filename, lineno);
 			continue;
 		}
 
@@ -697,7 +714,7 @@ static int parse_file(struct udev_rules *rules, const char *filename)
 		}
 		line[j] = '\0';
 
-		dbg("read '%s'", line);
+		dbg("read '%s'\n", line);
 		add_to_rules(rules, line, filename, lineno);
 	}
 
@@ -707,37 +724,69 @@ static int parse_file(struct udev_rules *rules, const char *filename)
 
 int udev_rules_init(struct udev_rules *rules, int resolve_names)
 {
-	struct stat stats;
-	int retval;
+	struct stat statbuf;
+	char filename[PATH_MAX];
+	LIST_HEAD(name_list);
+	LIST_HEAD(dyn_list);
+	struct name_entry *name_loop, *name_tmp;
+	struct name_entry *dyn_loop, *dyn_tmp;
+	int retval = 0;
 
 	memset(rules, 0x00, sizeof(struct udev_rules));
 	rules->resolve_names = resolve_names;
 
-	/* parse rules file or all matching files in directory */
-	if (stat(udev_rules_dir, &stats) != 0)
+	/* read main config from single file or all files in a directory */
+	if (stat(udev_rules_dir, &statbuf) != 0)
 		return -1;
-
-	if ((stats.st_mode & S_IFMT) != S_IFDIR) {
-		dbg("parse single rules file '%s'", udev_rules_dir);
-		retval = parse_file(rules, udev_rules_dir);
+	if ((statbuf.st_mode & S_IFMT) != S_IFDIR) {
+		dbg("parse single rules file '%s'\n", udev_rules_dir);
+		name_list_add(&name_list, udev_rules_dir, 1);
 	} else {
-		struct name_entry *name_loop, *name_tmp;
-		LIST_HEAD(name_list);
-
-		dbg("parse rules directory '%s'", udev_rules_dir);
+		dbg("parse rules directory '%s'\n", udev_rules_dir);
 		retval = add_matching_files(&name_list, udev_rules_dir, RULESFILE_SUFFIX);
+	}
+
+	/* read dynamic rules directory */
+	strlcpy(filename, udev_root, sizeof(filename));
+	strlcat(filename, "/"RULES_DYN_DIR, sizeof(filename));
+	if (stat(filename, &statbuf) != 0) {
+		create_path(filename);
+		selinux_setfscreatecon(filename, NULL, S_IFDIR|0755);
+		mkdir(filename, 0755);
+		selinux_resetfscreatecon();
+	}
+	add_matching_files(&dyn_list, filename, RULESFILE_SUFFIX);
+
+	/* sort dynamic rules files by basename into list of files */
+	list_for_each_entry_safe(dyn_loop, dyn_tmp, &dyn_list, node) {
+		const char *dyn_base = strrchr(dyn_loop->name, '/');
+
+		if (dyn_base == NULL)
+			continue;
 
 		list_for_each_entry_safe(name_loop, name_tmp, &name_list, node) {
-			if (stat(name_loop->name, &stats) == 0) {
-				if (stats.st_size)
-					parse_file(rules, name_loop->name);
-				else
-					dbg("empty rules file '%s'", name_loop->name);
-			} else
-				err("could not read '%s': %s", name_loop->name, strerror(errno));
-			list_del(&name_loop->node);
-			free(name_loop);
+			const char *name_base = strrchr(name_loop->name, '/');
+
+			if (name_base == NULL)
+				continue;
+
+			if (strcmp(name_base, dyn_base) > 0)
+				break;
 		}
+		list_move_tail(&dyn_loop->node, &name_loop->node);
+	}
+
+	/* parse list of files */
+	list_for_each_entry_safe(name_loop, name_tmp, &name_list, node) {
+		if (stat(name_loop->name, &statbuf) == 0) {
+			if (statbuf.st_size)
+				parse_file(rules, name_loop->name);
+			else
+				dbg("empty rules file '%s'\n", name_loop->name);
+		} else
+			err("could not read '%s': %s\n", name_loop->name, strerror(errno));
+		list_del(&name_loop->node);
+		free(name_loop);
 	}
 
 	return retval;
@@ -750,3 +799,4 @@ void udev_rules_cleanup(struct udev_rules *rules)
 		rules->buf = NULL;
 	}
 }
+