[med-svn] [galileo] 02/02: Correct udev rules to limit access to the user logged into the console instead of allowing everyone access to the device.
Petter Reinholdtsen
pere at moszumanska.debian.org
Wed Oct 19 07:10:14 UTC 2016
This is an automated email from the git hooks/post-receive script.
pere pushed a commit to branch master
in repository galileo.
commit bcf92eb7b6d94a917eabaab07e24f792408f4110
Author: Petter Reinholdtsen <pere at hungry.com>
Date: Wed Oct 19 07:10:06 2016 +0000
Correct udev rules to limit access to the user logged into the console instead of allowing everyone access to the device.
---
debian/changelog | 2 ++
debian/galileo-daemon.udev | 6 ++++--
debian/galileo.udev | 11 +++++++----
3 files changed, 13 insertions(+), 6 deletions(-)
diff --git a/debian/changelog b/debian/changelog
index ccb7bd5..c4659b2 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -2,6 +2,8 @@ galileo (0.5.1-2.1) UNRELEASED; urgency=medium
[ Petter Reinholdtsen ]
* Correct AppStream modalias matching rule (Closes: #837631).
+ * Correct udev rules to limit access to the user logged into the
+ console instead of allowing everyone access to the device.
-- Dylan Aïssi <bob.dybian at gmail.co> Wed, 19 Oct 2016 07:03:54 +0000
diff --git a/debian/galileo-daemon.udev b/debian/galileo-daemon.udev
index 2dea93b..514457d 100644
--- a/debian/galileo-daemon.udev
+++ b/debian/galileo-daemon.udev
@@ -2,6 +2,8 @@
# used by Galileo to securely synchronize a Fitbit device with the Fitbit web service.
# This file (99-galileo-daemon.rules) is installed by the package "galileo-daemon".
-# The rule below disable the rule in the file "98-galileo.rules" and it allow to run galileo as a daemon under the "galileo" account.
+# The rule below override the rule in the file "98-galileo.rules" and it allow to
+# run galileo as a daemon under the "galileo" account.
-SUBSYSTEM=="usb", ATTR{idVendor}=="2687", ATTR{idProduct}=="fb01", SYMLINK+="fitbit", MODE="0660", OWNER="galileo"
+SUBSYSTEM=="usb", ATTR{idVendor}=="2687", ATTR{idProduct}=="fb01", \
+ SYMLINK+="fitbit", MODE="0660", OWNER="galileo", GROUP="plugdev", TAG+="uaccess"
diff --git a/debian/galileo.udev b/debian/galileo.udev
index e5deb28..675299d 100644
--- a/debian/galileo.udev
+++ b/debian/galileo.udev
@@ -2,10 +2,13 @@
# used by Galileo to securely synchronize a Fitbit device with the Fitbit web service.
# This file (98-galileo.rules) is installed by the package "galileo".
-# The rule below allow to run galileo as a non-privileged user and not as a daemon.
+# The rule below allow to run galileo as a non-privileged user logged into the
+# console and not as a daemon.
-SUBSYSTEM=="usb", ATTR{idVendor}=="2687", ATTR{idProduct}=="fb01", SYMLINK+="fitbit", MODE="0666"
+SUBSYSTEM=="usb", ATTR{idVendor}=="2687", ATTR{idProduct}=="fb01", \
+ SYMLINK+="fitbit", MODE="0660", GROUP="plugdev", TAG+="uaccess"
-# The package "galileo-daemon" install another rule with a higher priority (99-galileo-daemon.rules).
-# The rule in the file (99-galileo-daemon.rules) will disable the rule above.
+# The package "galileo-daemon" install another rule with a higher
+# priority (99-galileo-daemon.rules).
+# The rule in the file (99-galileo-daemon.rules) will override the rule above.
# This new rule allow to run galileo as a daemon under the "galileo" account.
--
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/debian-med/galileo.git
More information about the debian-med-commit
mailing list