X-Git-Url: https://git.pld-linux.org/?a=blobdiff_plain;f=udev.rules;h=5cf25b2c5cfdd514a9d497cfd3d3d588b803694e;hb=9ddc8e9178084a32ddbf55b276c81885e0509cac;hp=72c9ab8aac8de80a520c63fe4dc6a6ae12e363da;hpb=2c014189daca6704950ad819eed99e4fe06641c1;p=packages%2FVirtualBox.git

diff --git a/udev.rules b/udev.rules
index 72c9ab8..5cf25b2 100644
--- a/udev.rules
+++ b/udev.rules
@@ -1,4 +1,20 @@
 # udev rules for VirtualBox
+# Reference: https://www.virtualbox.org/browser/vbox/trunk/src/VBox/Installer/linux/installer-common.sh
+
+# Devices in Host
 KERNEL=="vboxdrv",    GROUP="vbox", MODE="0660"
-KERNEL=="vboxguest",  GROUP="vbox", MODE="0660"
+# vboxdrvu -- the unrestricted device
+KERNEL=="vboxdrvu",   GROUP="root", MODE="0666"
 KERNEL=="vboxnetctl", GROUP="vbox", MODE="0660"
+
+# these lines below give access permission to vbox users to properly work with usb nodes, enabling them could be security risk:
+# https://bugzilla.novell.com/show_bug.cgi?id=664520
+SUBSYSTEM=="usb_device", ACTION=="add", RUN+="VBoxCreateUSBNode.sh $major $minor $attr{bDeviceClass} vbox"
+SUBSYSTEM=="usb", ACTION=="add", ENV{DEVTYPE}=="usb_device", RUN+="VBoxCreateUSBNode.sh $major $minor $attr{bDeviceClass} vbox"
+
+SUBSYSTEM=="usb_device", ACTION=="remove", RUN+="VBoxCreateUSBNode.sh --remove $major $minor"
+SUBSYSTEM=="usb", ACTION=="remove", ENV{DEVTYPE}=="usb_device", RUN+="VBoxCreateUSBNode.sh --remove $major $minor"
+
+# Devices in Guest, should use acl really
+KERNEL=="vboxguest",  GROUP="vbox", MODE="0600"
+KERNEL=="vboxuser",   GROUP="vbox", MODE="0666"