From e9db430f94d4ebbaf4fb5bfda32213f26cd809b5 Mon Sep 17 00:00:00 2001 From: Alexander Shashkevych Date: Tue, 2 Dec 2014 20:13:01 +0200 Subject: udev-extraconf: restrict access to graphic buffers For security reasons fb and galcore devices must be only accessible by root user and/or video group. All other users must not have access to graphic buffers. Signed-off-by: Alexander Shashkevich Signed-off-by: Otavio Salvador --- meta-fsl-arm/recipes-core/udev/udev-extraconf/10-imx.rules | 10 ++++------ 1 file changed, 4 insertions(+), 6 deletions(-) (limited to 'meta-fsl-arm') diff --git a/meta-fsl-arm/recipes-core/udev/udev-extraconf/10-imx.rules b/meta-fsl-arm/recipes-core/udev/udev-extraconf/10-imx.rules index 202bf0458..6afc1e8e2 100644 --- a/meta-fsl-arm/recipes-core/udev/udev-extraconf/10-imx.rules +++ b/meta-fsl-arm/recipes-core/udev/udev-extraconf/10-imx.rules @@ -16,10 +16,8 @@ KERNEL=="mc13783_connectiv*", NAME="mc13783_connectivity" KERNEL=="mxc_iim", MODE="0444", SYMLINK+="mxc_mem" KERNEL=="mxs_viim", MODE="0444", SYMLINK+="mxc_mem" KERNEL=="mxc_ipu", MODE="0666" -KERNEL=="fb0", MODE="0666" -KERNEL=="fb1", MODE="0666" -KERNEL=="fb2", MODE="0666" KERNEL=="mxc_vpu", MODE="0666" -SUBSYSTEM=="video", MODE="0666" -KERNEL=="gsl_kmod", MODE="0666" -KERNEL=="galcore", MODE="0666" +SUBSYSTEM=="video", MODE="0660" +KERNEL=="fb[0-9]", MODE="0660", GROUP="video" +KERNEL=="gsl_kmod", MODE="0660", GROUP="video" +KERNEL=="galcore", MODE="0660", GROUP="video" -- cgit v1.2.3-54-g00ecf