especially useful to set pam_console ownerships for e.g. /dev/cdrom, which is a symlink to the $DEVNAME.