1 /*-*- Mode: C; c-basic-offset: 8; indent-tabs-mode: nil -*-*/
4 * manage device node user ACL
6 * Copyright 2010-2012 Kay Sievers <kay@vrfy.org>
7 * Copyright 2010 Lennart Poettering
9 * This program is free software: you can redistribute it and/or modify
10 * it under the terms of the GNU General Public License as published by
11 * the Free Software Foundation, either version 2 of the License, or
12 * (at your option) any later version.
14 * This program is distributed in the hope that it will be useful,
15 * but WITHOUT ANY WARRANTY; without even the implied warranty of
16 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
17 * GNU General Public License for more details.
19 * You should have received a copy of the GNU General Public License
20 * along with this program. If not, see <http://www.gnu.org/licenses/>.
29 #include "login-util.h"
30 #include "logind-acl.h"
34 static int builtin_uaccess(struct udev_device
*dev
, int argc
, char *argv
[], bool test
) {
36 const char *path
= NULL
, *seat
;
37 bool changed_acl
= false;
42 /* don't muck around with ACLs when the system is not running systemd */
43 if (!logind_running())
46 path
= udev_device_get_devnode(dev
);
47 seat
= udev_device_get_property_value(dev
, "ID_SEAT");
51 r
= sd_seat_get_active(seat
, NULL
, &uid
);
52 if (r
== -ENXIO
|| r
== -ENODATA
) {
53 /* No active session on this seat */
57 log_error("Failed to determine active user on seat %s.", seat
);
61 r
= devnode_acl(path
, true, false, 0, true, uid
);
63 log_full_errno(r
== -ENOENT
? LOG_DEBUG
: LOG_ERR
, r
, "Failed to apply ACL on %s: %m", path
);
71 if (path
&& !changed_acl
) {
74 /* Better be safe than sorry and reset ACL */
75 k
= devnode_acl(path
, true, false, 0, false, 0);
77 log_full_errno(errno
== ENOENT
? LOG_DEBUG
: LOG_ERR
, k
, "Failed to apply ACL on %s: %m", path
);
83 return r
< 0 ? EXIT_FAILURE
: EXIT_SUCCESS
;
86 const struct udev_builtin udev_builtin_uaccess
= {
88 .cmd
= builtin_uaccess
,
89 .help
= "Manage device node user ACL",