[arch-commits] Commit in udev/trunk (81-arch.rules)

Tom Gundersen tomegun at archlinux.org
Sun Aug 28 00:18:07 UTC 2011


    Date: Saturday, August 27, 2011 @ 20:18:06
  Author: tomegun
Revision: 136369

rules: drop the storage group

Do not add devices to the storage group by default. This is a security risk.
The typical example is that it will let a remote user access the usb drive
of a local user.

For mounting and partitoning/formatting use udisks.

If this functionality is needed add a custom rule in /etc, or create an AUR
package.

Modified:
  udev/trunk/81-arch.rules

---------------+
 81-arch.rules |   17 -----------------
 1 file changed, 17 deletions(-)

Modified: 81-arch.rules
===================================================================
--- 81-arch.rules	2011-08-27 23:37:57 UTC (rev 136368)
+++ 81-arch.rules	2011-08-28 00:18:06 UTC (rev 136369)
@@ -1,23 +1,6 @@
 # Udev rules for Archlinux by Tobias Powalowski <tpowa at archlinux.org>
 # do not edit this file, it will be overwritten on update
 
-## The storage group ##
-
-# permissions for removable devices like cardreaders or sticks (0)
-# and usb to scsi external adapters (7)
-KERNEL=="sd*", ATTRS{scsi_level}=="3", ATTRS{type}=="0|7", GROUP="storage"
-
-# permissions for firewire external drives
-KERNEL=="sd*", ATTRS{scsi_level}=="5", GROUP="storage"
-
-# permissions for ide storage like pcmcia card readers
-ACTION!="add", GOTO="pcmcia_end"
-SUBSYSTEM!="block", GOTO="pcmcia_end"
-KERNEL=="hd*[!0-9]", IMPORT{program}="ata_id --export $tempnode"
-KERNEL=="hd*", IMPORT{parent}=="ID_*"
-KERNEL=="hd*", ENV{ID_TYPE}=="generic", GROUP="storage"
-LABEL="pcmcia_end"
-
 ## Misc permissions ##
 
 # this might belong in <http://aur.archlinux.org/packages.php?ID=22698>




More information about the arch-commits mailing list