Re: Proposed Hardware File Context file.

[Luke Kenneth Casson Leighton <lkcl@lkcl.net>]

On Fri, Sep 03, 2004 at 07:28:03AM -0400, Stephen Smalley wrote:
> On Thu, 2004-09-02 at 19:30, Colin Walters wrote:
> > I think "unit" in this context should be a regular expression which can
> > match an arbitrary identification string.  udev would extract the e.g.
> > the USB model number for this purpose.  This wouldn't actually be
> > supplied in the sample policy, but system administrators could use it to
> > customize the policy at a more granular level than "cdrom".
> 
> What granularity does udev currently support for specifying
> ownership/mode on device nodes?  

 ironically, it's scripted - with regexps matching nodes :)

 and then the owner, group and permissions are specified.

 there's also a system for dealing with classes of devices.

 so ide and scsi and also cd symbolic links are dealt with separately,
 with scripts.

 l.

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.