hal: Branch 'master'
Martin Pitt
martin at kemper.freedesktop.org
Tue May 12 04:23:17 PDT 2009
fdi/policy/10osvendor/10-smartcardreaders.fdi | 16 ++++++++++++++++
fdi/policy/10osvendor/Makefile.am | 1 +
policy/org.freedesktop.hal.device-access.policy | 9 +++++++++
3 files changed, 26 insertions(+)
New commits:
commit a18f69ea0d1a100bf85925b81acd0539f564eae6
Author: Martin Pitt <martin.pitt at ubuntu.com>
Date: Tue May 12 13:22:35 2009 +0200
add ACL policy for smartcard readers
Grant access to the currently logged-in user on some SCM smart-card readers.
This improves the out-of-box support for OpenGPG card users.
Reported in https://launchpad.net/bugs/57755
diff --git a/fdi/policy/10osvendor/10-smartcardreaders.fdi b/fdi/policy/10osvendor/10-smartcardreaders.fdi
new file mode 100644
index 0000000..1c9388a
--- /dev/null
+++ b/fdi/policy/10osvendor/10-smartcardreaders.fdi
@@ -0,0 +1,16 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<deviceinfo version="0.2">
+ <device>
+ <match key="info.subsystem" string="usb">
+ <!-- SCM SPR 335, SPR 532 -->
+ <match key="usb.vendor_id" int="0x4e6">
+ <match key="usb.product_id" int_outof="0x5115;0xe001;0xe003">
+ <append key="info.capabilities" type="strlist">access_control</append>
+ <merge key="access_control.file" type="copy_property">@info.parent:linux.device_file</merge>
+ <merge key="access_control.type" type="string">smart-card-reader</merge>
+ </match>
+ </match>
+ </match>
+ </device>
+</deviceinfo>
diff --git a/fdi/policy/10osvendor/Makefile.am b/fdi/policy/10osvendor/Makefile.am
index 67c021c..5a19795 100644
--- a/fdi/policy/10osvendor/Makefile.am
+++ b/fdi/policy/10osvendor/Makefile.am
@@ -8,6 +8,7 @@ dist_fdi_DATA = \
10-leds.fdi \
10-power-mgmt-policy.fdi \
10-rfkill-switch.fdi \
+ 10-smartcardreaders.fdi \
10-tabletPCs.fdi \
10-x11-input.fdi \
15-storage-luks.fdi \
diff --git a/policy/org.freedesktop.hal.device-access.policy b/policy/org.freedesktop.hal.device-access.policy
index e083eb4..7643a3e 100644
--- a/policy/org.freedesktop.hal.device-access.policy
+++ b/policy/org.freedesktop.hal.device-access.policy
@@ -199,4 +199,13 @@ NOTE: Please keep the actions in alpabetical order
</defaults>
</action>
+ <action id="org.freedesktop.hal.device-access.smart-card-reader">
+ <description>Directly access smart-card readers</description>
+ <message>System policy prevents access to the smart-card readers</message>
+ <defaults>
+ <allow_inactive>no</allow_inactive>
+ <allow_active>yes</allow_active>
+ </defaults>
+ </action>
+
</policyconfig>
More information about the hal-commit
mailing list