meta-security/recipes-core/systemd/systemd/0004-tizen-smack-Handling-of-dev.patch

   1 From 468ef790a7a0e53c390cec9c63090a0ae04a4d58 Mon Sep 17 00:00:00 2001
   2 From: Michael Demeter <michael.demeter@intel.com>
   3 Date: Fri, 11 Oct 2013 15:37:57 -0700
   4 Subject: [PATCH 4/9] tizen-smack: Handling of /dev
   5
   6 Smack enabled systems need /dev special devices correctly labeled
   7
   8 - Add AC_DEFINE for HAVE_SMACK to configure.ac
   9 - Add Check for smack in Makefile.am to include smack default rules
  10 - Add smack default rules to label /dev/xxx correctly for access
  11
  12 Upstream-Status: Inappropriate [configuration]
  13
  14 Change-Id: Iebe2e349cbedb3013abdf32edb55e9310f1d17f5
  15 ---
  16  Makefile.am                       |  5 +++++
  17  rules/55-udev-smack-default.rules | 23 +++++++++++++++++++++++
  18  2 files changed, 28 insertions(+)
  19  create mode 100644 rules/55-udev-smack-default.rules
  20
  21 diff --git a/Makefile.am b/Makefile.am
  22 index bf04d31..1a05607 100644
  23 --- a/Makefile.am
  24 +++ b/Makefile.am
  25 @@ -3571,6 +3571,11 @@ dist_udevrules_DATA += \
  26  nodist_udevrules_DATA += \
  27         rules/99-systemd.rules
  28
  29 +if HAVE_SMACK
  30 +dist_udevrules_DATA += \
  31 +       rules/55-udev-smack-default.rules
  32 +endif
  33 +
  34  udevconfdir = $(sysconfdir)/udev
  35  dist_udevconf_DATA = \
  36         src/udev/udev.conf
  37 diff --git a/rules/55-udev-smack-default.rules b/rules/55-udev-smack-default.rules
  38 new file mode 100644
  39 index 0000000..3829019
  40 --- /dev/null
  41 +++ b/rules/55-udev-smack-default.rules
  42 @@ -0,0 +1,23 @@
  43 +# do not edit this file, it will be overwritten on update
  44 +
  45 +KERNEL=="null", SECLABEL{smack}="*"
  46 +KERNEL=="zero", SECLABEL{smack}="*"
  47 +KERNEL=="console", SECLABEL{smack}="*"
  48 +KERNEL=="kmsg", SECLABEL{smack}="*"
  49 +KERNEL=="video*", SECLABEL{smack}="*"
  50 +KERNEL=="card*", SECLABEL{smack}="*"
  51 +KERNEL=="ptmx", SECLABEL{smack}="*"
  52 +KERNEL=="tty", SECLABEL{smack}="*"
  53 +
  54 +SUBSYSTEM=="graphics", GROUP="video", SECLABEL{smack}="*"
  55 +SUBSYSTEM=="drm", GROUP="video", SECLABEL{smack}="*"
  56 +SUBSYSTEM=="dvb", GROUP="video", SECLABEL{smack}="*"
  57 +
  58 +SUBSYSTEM=="tty", KERNEL=="ptmx", GROUP="tty", MODE="0666", SECLABEL{smack}="*"
  59 +SUBSYSTEM=="tty", KERNEL=="tty", GROUP="tty", MODE="0666", SECLABEL{smack}="*"
  60 +SUBSYSTEM=="tty", KERNEL=="tty[0-9]*", GROUP="tty", MODE="0620", SECLABEL{smack}="*"
  61 +SUBSYSTEM=="vc", KERNEL=="vcs*|vcsa*", GROUP="tty", SECLABEL{smack}="*"
  62 +KERNEL=="tty[A-Z]*[0-9]|pppox[0-9]*|ircomm[0-9]*|noz[0-9]*|rfcomm[0-9]*", GROUP="dialout", SECLABEL{smack}="*"
  63 +
  64 +SUBSYSTEM=="input", KERNEL=="mouse*|mice|event*", MODE="0640", SECLABEL{smack}="*"
  65 +SUBSYSTEM=="input", KERNEL=="ts[0-9]*|uinput", MODE="0640", SECLABEL{smack}="*"
  66 --
  67 1.8.4.5
  68