diff --git a/core/busybox/checksums b/core/busybox/checksums index c8d5e9f0..04414a65 100644 --- a/core/busybox/checksums +++ b/core/busybox/checksums @@ -14,4 +14,4 @@ ebd61afac770d3d9cae5c411f44002496fb18b28cf7b77520072a3909852246e 4a5981f4b0d791fe9b84b0b2e01ae905f6565c8245b3cd603e6decf34ddad71a f857fea99533df7b780c911bae19b0029a70ee1c8d36b49e7782604fb9cf25f8 e7db036d8e43bb2511df087342708f5fb51d28a7dff9008a1cf440390870a972 -11fe9cdb031d0c387dfb366dc9cdbabadd129f5bbed34659868914058ada11c7 +d021224bb87c30b73efcd302610af50a3e30f22b7521343eb295b5a3770c73d6 diff --git a/core/busybox/files/mdev.conf b/core/busybox/files/mdev.conf index 0f199321..6a878e01 100644 --- a/core/busybox/files/mdev.conf +++ b/core/busybox/files/mdev.conf @@ -1,37 +1,73 @@ -null root:root 666 @chmod 666 $MDEV -zero root:root 666 -full root:root 666 +# Configuration based on 'mdev-like-a-boss'. +# https://github.com/slashbeast/mdev-like-a-boss/blob/master/mdev.conf -random root:root 444 -urandom root:root 444 -kmem root:root 640 -mem root:root 640 -port root:root 640 +null root:root 666 @chmod 666 $MDEV +zero root:root 666 +full root:root 666 +random root:root 444 +urandom root:root 444 +hwrandom root:root 444 +grsec root:root 660 +kmem root:root 640 +mem root:root 640 -console root:tty 600 @chmod 600 $MDEV -ptmx root:tty 666 -pty.* root:tty 660 +port root:root 640 +console root:tty 600 @chmod 600 $MDEV +ptmx root:tty 666 +pty.* root:tty 660 +tty root:tty 666 +tty[0-9]* root:tty 660 +vcsa*[0-9]* root:tty 660 -usbdev[0-9].[0-9]* root:root 660 ! +# Kernel based virtual machine. +kvm root:kvm 660 +vhost-net root:kvm 660 -tty root:tty 666 -tty[0-9]* root:tty 660 -vcsa*[0-9]* root:tty 660 +# Block devices. +ram([0-9]*) root:disk 660 >rd/%1 +loop([0-9]+) root:disk 660 >loop/%1 +sr[0-9]* root:cdrom 660 @ln -sf $MDEV cdrom +fd[0-9]* root:floppy 660 +net/tun[0-9]* root:kvm 660 +net/tap[0-9]* root:root 600 +fuse root:root 666 +agpgart root:root 660 >misc/ +psaux root:root 660 >misc/ +rtc root:root 664 >misc/ + +# Audio stuff. +adsp root:audio 660 >sound/ +audio root:audio 660 >sound/ +dsp root:audio 660 >sound/ +mixer root:audio 660 >sound/ +sequencer.* root:audio 660 >sound/ + +# Raid controllers. +cciss!(.*) root:disk 660 =cciss/%1 +ida!(.*) root:disk 660 =ida/%1 +rd!(.*) root:disk 660 =rd/%1 + +# Input stuff. SUBSYSTEM=input;.* root:input 660 -adsp root:audio 660 >sound/ -audio root:audio 660 >sound/ -dsp root:audio 660 >sound/ -mixer root:audio 660 >sound/ -sequencer.* root:audio 660 >sound/ +# Video stuff. +card[0-9] root:video 660 =dri/ +vbi[0-9] root:video 660 >v4l/ +video[0-9] root:video 660 >v4l/ +dri/.* root:video 660 -card[0-9] root:video 660 =dri/ +# Don't create old usbdev* devices. +usbdev[0-9].[0-9]* root:root 660 ! -agpgart root:root 660 >misc/ -psaux root:root 660 >misc/ -rtc root:root 664 >misc/ +# Stop creating x:x:x:x which looks like /dev/dm-*. +[0-9]+\:[0-9]+\:[0-9]+\:[0-9]+ root:root 660 ! -dri/.* root:video 660 -snd/.* root:audio 660 +# /dev/cpu support. +microcode root:root 600 =cpu/ +cpu([0-9]+) root:root 600 =cpu/%1/cpuid +msr([0-9]+) root:root 600 =cpu/%1/msr +# libudev-zero hotplug. +SUBSYSTEM=drm;.* root:video 660 *env > /tmp/.libudev-zero/uevent.$$ +SUBSYSTEM=input;.* root:input 660 *env > /tmp/.libudev-zero/uevent.$$