From: Elan Ruusamäe <glen@delfi.ee>
Date: Sat, 1 Mar 2014 15:37:41 +0000 (+0200)
Subject: add warning about udev rules being insecure (allowing you to access any usb device)
X-Git-Tag: auto/th/VirtualBox-4.3.8-3~18
X-Git-Url: http://git.pld-linux.org/gitweb.cgi?p=packages%2FVirtualBox.git;a=commitdiff_plain;h=37dbb4e161474ba500b4b064f612c31edb03afd3

add warning about udev rules being insecure (allowing you to access any usb device)
---

diff --git a/udev.rules b/udev.rules
index e9dfda7..9718593 100644
--- a/udev.rules
+++ b/udev.rules
@@ -2,6 +2,8 @@
 KERNEL=="vboxdrv",    GROUP="vbox", MODE="0660"
 KERNEL=="vboxnetctl", GROUP="vbox", MODE="0660"
 
+# these lines below give access permission to vbox users to properly work with usb nodes, enabling them could be security risk:
+# https://bugzilla.novell.com/show_bug.cgi?id=664520
 SUBSYSTEM=="usb_device", ACTION=="add", RUN+="VBoxCreateUSBNode.sh $major $minor $attr{bDeviceClass} vbox"
 SUBSYSTEM=="usb", ACTION=="add", ENV{DEVTYPE}=="usb_device", RUN+="VBoxCreateUSBNode.sh $major $minor $attr{bDeviceClass} vbox"