[systemd-devel] How to unset "uaccess" tag in udev rule?

[David Herrmann]

Hi

On Tue, Mar 14, 2017 at 10:44 PM, Zbigniew Jędrzejewski-Szmek
<zbyszek at in.waw.pl> wrote:
> On Sun, Mar 12, 2017 at 07:38:13PM +0100, Manuel Reimer wrote:
>> Hello,
>>
>> my distributor sets the following rule in /usr/lib/udev/rules.d:
>>
>> KERNEL=="uinput", SUBSYSTEM=="misc", OPTIONS+="static_node=uinput",
>> TAG+="uaccess"
>>
>> I think this is not a good idea and that there is a good reason why
>> users can't create uinput devices, so I want to get rid of that
>> rule.
>>
>> So far I did this by creating an empty file with the same name in
>> /etc/udev/rules.d which works well, but for no reason the name was
>> changed some time ago which overrides my empty file and reactivates
>> the problematic rule.
> That's the only way. Tags cannot be unset.

Use TAG-="foobar".

Thanks
David


commit 8e3ba3772cadf6a8292b0da533062dd4d377af67
Author: David Herrmann <dh.herrmann at gmail.com>
Date:   Thu Sep 11 13:25:21 2014 +0200

    udev: allow removing tags via TAG-="foobar"

    This extends the udev parser to support OP_REMOVE (-=) and adds support
    for TAG-= to remove previously set tags. We don't fail if the tag didn't
    exist.

    This is pretty handy if we ship default rules for seat-assignments and
    users want to exclude specific devices from that. They can easily add
    rules that drop any automatically added "seat" tags again.