permissions.rules 3.4 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110
  1. ACTION!="add", GOTO="permissions_end"
  2. # devices needed to load the drivers providing them
  3. KERNEL=="tun", OPTIONS+="ignore_remove"
  4. KERNEL=="ppp", OPTIONS+="ignore_remove"
  5. KERNEL=="loop[0-9]*", OPTIONS+="ignore_remove"
  6. # default permissions for block devices
  7. SUBSYSTEM=="block", GROUP="disk"
  8. # the aacraid driver is broken and reports that disks removable (see #404927)
  9. SUBSYSTEM=="block", ATTRS{removable}=="1", \
  10. DRIVERS!="aacraid", GROUP="floppy"
  11. # all block devices on these buses are "removable"
  12. SUBSYSTEM=="block", SUBSYSTEMS=="usb|ieee1394|mmc|pcmcia", GROUP="floppy"
  13. # IDE devices
  14. KERNEL=="hd[a-z]|pcd[0-9]*", DRIVERS=="ide-cdrom|pcd", \
  15. IMPORT{program}="cdrom_id --export $tempnode"
  16. ENV{ID_CDROM}=="?*", GROUP="cdrom"
  17. KERNEL=="ht[0-9]*", GROUP="tape"
  18. KERNEL=="nht[0-9]*", GROUP="tape"
  19. # SCSI devices
  20. KERNEL=="sr[0-9]*", IMPORT{program}="cdrom_id --export $tempnode"
  21. SUBSYSTEMS=="scsi", ATTRS{type}=="1", GROUP="tape"
  22. SUBSYSTEMS=="scsi", ATTRS{type}=="4", GROUP="cdrom"
  23. SUBSYSTEMS=="scsi", ATTRS{type}=="5", GROUP="cdrom"
  24. SUBSYSTEMS=="scsi", ATTRS{type}=="8", GROUP="tape"
  25. # USB devices
  26. KERNEL=="legousbtower*", MODE="0666"
  27. KERNEL=="lp[0-9]*", SUBSYSTEMS=="usb", GROUP="lp"
  28. # usbfs-like devices
  29. SUBSYSTEM=="usb", ENV{DEVTYPE}=="usb_device", \
  30. MODE="0664"
  31. # iRiver music players
  32. SUBSYSTEM=="usb", ENV{DEVTYPE}=="usb_device", GROUP="plugdev", \
  33. ATTRS{idVendor}=="4102", ATTRS{idProduct}=="10[01][135789]"
  34. # serial devices
  35. SUBSYSTEM=="tty", GROUP="dialout"
  36. SUBSYSTEM=="capi", GROUP="dialout"
  37. SUBSYSTEM=="slamr", GROUP="dialout"
  38. SUBSYSTEM=="zaptel", GROUP="dialout"
  39. # vc devices (all members of the tty subsystem)
  40. KERNEL=="ptmx", MODE="0666", GROUP="root"
  41. KERNEL=="console", MODE="0600", GROUP="root"
  42. KERNEL=="tty", MODE="0666", GROUP="root"
  43. KERNEL=="tty[0-9]*", GROUP="root"
  44. KERNEL=="pty*", MODE="0666", GROUP="tty"
  45. # video devices
  46. SUBSYSTEM=="video4linux", GROUP="video"
  47. SUBSYSTEM=="drm", GROUP="video"
  48. SUBSYSTEM=="dvb", GROUP="video"
  49. SUBSYSTEM=="em8300", GROUP="video"
  50. SUBSYSTEM=="graphics", GROUP="video"
  51. SUBSYSTEM=="nvidia", GROUP="video"
  52. # misc devices
  53. KERNEL=="random", MODE="0666"
  54. KERNEL=="urandom", MODE="0666"
  55. KERNEL=="mem", MODE="0640", GROUP="kmem"
  56. KERNEL=="kmem", MODE="0640", GROUP="kmem"
  57. KERNEL=="port", MODE="0640", GROUP="kmem"
  58. KERNEL=="full", MODE="0666"
  59. KERNEL=="null", MODE="0666"
  60. KERNEL=="zero", MODE="0666"
  61. KERNEL=="inotify", MODE="0666"
  62. KERNEL=="sgi_fetchop", MODE="0666"
  63. KERNEL=="sonypi", MODE="0666"
  64. KERNEL=="agpgart", GROUP="video"
  65. KERNEL=="rtc|rtc[0-9]*", GROUP="audio"
  66. KERNEL=="kqemu", MODE="0666"
  67. KERNEL=="tun", MODE="0666",
  68. KERNEL=="cdemu[0-9]*", GROUP="cdrom"
  69. KERNEL=="pktcdvd[0-9]*", GROUP="cdrom"
  70. KERNEL=="pktcdvd", MODE="0644"
  71. # printers and parallel devices
  72. SUBSYSTEM=="printer", GROUP="lp"
  73. SUBSYSTEM=="ppdev", GROUP="lp"
  74. KERNEL=="irlpt*", GROUP="lp"
  75. KERNEL=="pt[0-9]*", GROUP="tape"
  76. KERNEL=="pht[0-9]*", GROUP="tape"
  77. # sound devices
  78. SUBSYSTEM=="sound", GROUP="audio"
  79. # ieee1394 devices
  80. KERNEL=="raw1394", GROUP="disk"
  81. KERNEL=="dv1394*", GROUP="video"
  82. KERNEL=="video1394*", GROUP="video"
  83. # input devices
  84. KERNEL=="event[0-9]*", ATTRS{name}=="*dvb*|*DVB*|* IR *" \
  85. MODE="0664", GROUP="video"
  86. KERNEL=="js[0-9]*", MODE="0664"
  87. KERNEL=="lirc[0-9]*", GROUP="video"
  88. # AOE character devices
  89. SUBSYSTEM=="aoe", MODE="0220", GROUP="disk"
  90. SUBSYSTEM=="aoe", KERNEL=="err", MODE="0440"
  91. LABEL="permissions_end"