From: Alexander Shashkevych Date: Tue, 2 Dec 2014 18:13:01 +0000 (+0200) Subject: udev-extraconf: restrict access to graphic buffers X-Git-Tag: 2.1~756 X-Git-Url: https://code.ossystems.io/gitweb?a=commitdiff_plain;h=e9db430f94d4ebbaf4fb5bfda32213f26cd809b5;p=meta-freescale.git udev-extraconf: restrict access to graphic buffers For security reasons fb and galcore devices must be only accessible by root user and/or video group. All other users must not have access to graphic buffers. Signed-off-by: Alexander Shashkevich Signed-off-by: Otavio Salvador --- diff --git a/meta-fsl-arm/recipes-core/udev/udev-extraconf/10-imx.rules b/meta-fsl-arm/recipes-core/udev/udev-extraconf/10-imx.rules index 202bf045..6afc1e8e 100644 --- a/meta-fsl-arm/recipes-core/udev/udev-extraconf/10-imx.rules +++ b/meta-fsl-arm/recipes-core/udev/udev-extraconf/10-imx.rules @@ -16,10 +16,8 @@ KERNEL=="mc13783_connectiv*", NAME="mc13783_connectivity" KERNEL=="mxc_iim", MODE="0444", SYMLINK+="mxc_mem" KERNEL=="mxs_viim", MODE="0444", SYMLINK+="mxc_mem" KERNEL=="mxc_ipu", MODE="0666" -KERNEL=="fb0", MODE="0666" -KERNEL=="fb1", MODE="0666" -KERNEL=="fb2", MODE="0666" KERNEL=="mxc_vpu", MODE="0666" -SUBSYSTEM=="video", MODE="0666" -KERNEL=="gsl_kmod", MODE="0666" -KERNEL=="galcore", MODE="0666" +SUBSYSTEM=="video", MODE="0660" +KERNEL=="fb[0-9]", MODE="0660", GROUP="video" +KERNEL=="gsl_kmod", MODE="0660", GROUP="video" +KERNEL=="galcore", MODE="0660", GROUP="video"