[med-svn] [galileo] 02/02: Correct udev rules to limit access to the user logged into the console instead of allowing everyone access to the device.

[Petter Reinholdtsen]

This is an automated email from the git hooks/post-receive script.

pere pushed a commit to branch master
in repository galileo.

commit bcf92eb7b6d94a917eabaab07e24f792408f4110
Author: Petter Reinholdtsen <pere at hungry.com>
Date:   Wed Oct 19 07:10:06 2016 +0000

    Correct udev rules to limit access to the user logged into the console instead of allowing everyone access to the device.
---
 debian/changelog           |  2 ++
 debian/galileo-daemon.udev |  6 ++++--
 debian/galileo.udev        | 11 +++++++----
 3 files changed, 13 insertions(+), 6 deletions(-)

diff --git a/debian/changelog b/debian/changelog
index ccb7bd5..c4659b2 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -2,6 +2,8 @@ galileo (0.5.1-2.1) UNRELEASED; urgency=medium
 
   [ Petter Reinholdtsen ]
   * Correct AppStream modalias matching rule (Closes: #837631).
+  * Correct udev rules to limit access to the user logged into the
+    console instead of allowing everyone access to the device.
 
  -- Dylan Aïssi <bob.dybian at gmail.co>  Wed, 19 Oct 2016 07:03:54 +0000
 
diff --git a/debian/galileo-daemon.udev b/debian/galileo-daemon.udev
index 2dea93b..514457d 100644
--- a/debian/galileo-daemon.udev
+++ b/debian/galileo-daemon.udev
@@ -2,6 +2,8 @@
 # used by Galileo to securely synchronize a Fitbit device with the Fitbit web service.
 
 # This file (99-galileo-daemon.rules) is installed by the package "galileo-daemon".
-# The rule below disable the rule in the file "98-galileo.rules" and it allow to run galileo as a daemon under the "galileo" account.
+# The rule below override the rule in the file "98-galileo.rules" and it allow to
+# run galileo as a daemon under the "galileo" account.
 
-SUBSYSTEM=="usb", ATTR{idVendor}=="2687", ATTR{idProduct}=="fb01", SYMLINK+="fitbit", MODE="0660", OWNER="galileo"
+SUBSYSTEM=="usb", ATTR{idVendor}=="2687", ATTR{idProduct}=="fb01", \
+  SYMLINK+="fitbit", MODE="0660", OWNER="galileo", GROUP="plugdev", TAG+="uaccess"
diff --git a/debian/galileo.udev b/debian/galileo.udev
index e5deb28..675299d 100644
--- a/debian/galileo.udev
+++ b/debian/galileo.udev
@@ -2,10 +2,13 @@
 # used by Galileo to securely synchronize a Fitbit device with the Fitbit web service.
 
 # This file (98-galileo.rules) is installed by the package "galileo".
-# The rule below allow to run galileo as a non-privileged user and not as a daemon.
+# The rule below allow to run galileo as a non-privileged user logged into the
+# console and not as a daemon.
 
-SUBSYSTEM=="usb", ATTR{idVendor}=="2687", ATTR{idProduct}=="fb01", SYMLINK+="fitbit", MODE="0666"
+SUBSYSTEM=="usb", ATTR{idVendor}=="2687", ATTR{idProduct}=="fb01", \
+  SYMLINK+="fitbit", MODE="0660", GROUP="plugdev", TAG+="uaccess"
 
-# The package "galileo-daemon" install another rule with a higher priority (99-galileo-daemon.rules).
-# The rule in the file (99-galileo-daemon.rules) will disable the rule above.
+# The package "galileo-daemon" install another rule with a higher
+# priority (99-galileo-daemon.rules).
+# The rule in the file (99-galileo-daemon.rules) will override the rule above.
 # This new rule allow to run galileo as a daemon under the "galileo" account.

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/debian-med/galileo.git