From 42cf32a044657fd1d1db8eb9d8f57c019cea47c6 Mon Sep 17 00:00:00 2001
From: Alexandru Avadanii <Alexandru.Avadanii@enea.com>
Date: Fri, 2 Jul 2021 08:41:52 +0200
Subject: systemd: udev: /dev/kvm: change mode 0666 to 0660

Change-Id: I6363d78023ded97865f93307408150c7f2f6bbda
Signed-off-by: Alexandru Avadanii <Alexandru.Avadanii@enea.com>
---
 recipes-core/systemd/systemd_247.6.bbappend | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/recipes-core/systemd/systemd_247.6.bbappend b/recipes-core/systemd/systemd_247.6.bbappend
index 871da64..eb2b118 100644
--- a/recipes-core/systemd/systemd_247.6.bbappend
+++ b/recipes-core/systemd/systemd_247.6.bbappend
@@ -17,3 +17,9 @@ EXTRA_OEMESON += " \
 do_configure_prepend_sota() {
     cp ${WORKDIR}/basic.conf.in ${S}/sysusers.d/basic.conf.in
 }
+
+do_install_append () {
+    # Update default udev rules for /dev/kvm to be less permissive
+    sed -e 's/\(KERNEL=="kvm".*\)0666/\10660/' \
+        -i ${D}${rootlibexecdir}/udev/rules.d/50-udev-default.rules
+}
-- 
cgit v1.2.3-54-g00ecf