chore: improve comments on udev data.

2025-01-18 17:08:09 +01:00 · 2024-03-13 15:58:28 +00:00 · 2024-03-13 15:58:28 +00:00 · 09f1babb7c
commit 09f1babb7c
parent fef6390b9e
23 changed files with 37 additions and 37 deletions
--- a/apparmor.d/groups/freedesktop/colord
+++ b/apparmor.d/groups/freedesktop/colord
@ -56,7 +56,7 @@ profile colord @{exec_path} flags=(attach_disconnected) {
  @{run}/systemd/journal/socket rw,
  @{run}/systemd/sessions/* r,

-  @{run}/udev/data/+pci:* r,
+  @{run}/udev/data/+pci:* r,              # Identifies all PCI devices (CPU, GPU, Network, Disks, USB, etc.)
  @{run}/udev/data/c81:@{int}  r,         # For video4linux

  @{sys}/bus/scsi/devices/ r,
--- a/apparmor.d/groups/freedesktop/pulseaudio
+++ b/apparmor.d/groups/freedesktop/pulseaudio
@ -123,7 +123,7 @@ profile pulseaudio @{exec_path} {

  @{run}/systemd/users/@{uid} r,

-  @{run}/udev/data/+pci:* r,
+  @{run}/udev/data/+pci:* r,              # Identifies all PCI devices (CPU, GPU, Network, Disks, USB, etc.)
  @{run}/udev/data/c116:@{int} r,         # for ALSA
  @{run}/udev/data/c@{dynamic}:@{int} r,  # For dynamic assignment range 234 to 254, 384 to 511

--- a/apparmor.d/groups/freedesktop/upowerd
+++ b/apparmor.d/groups/freedesktop/upowerd
@ -32,10 +32,10 @@ profile upowerd @{exec_path} flags=(attach_disconnected) {
  @{run}/udev/data/+hid:* r,              # for HID-Compliant Keyboard
  @{run}/udev/data/+i2c:* r,
  @{run}/udev/data/+input:input@{int} r,  # for mouse, keyboard, touchpad
-  @{run}/udev/data/+pci:* r,
+  @{run}/udev/data/+pci:* r,              # Identifies all PCI devices (CPU, GPU, Network, Disks, USB, etc.)
  @{run}/udev/data/+platform:* r,
  @{run}/udev/data/+power_supply* r,
-  @{run}/udev/data/+sound:card@{int} r,   # for sound
+  @{run}/udev/data/+sound:card@{int} r,   # for sound card
  @{run}/udev/data/c10:@{int} r,          # for non-serial mice, misc features
  @{run}/udev/data/c13:@{int}  r,         # for /dev/input/*
  @{run}/udev/data/c116:@{int} r,         # for ALSA
--- a/apparmor.d/groups/freedesktop/xorg
+++ b/apparmor.d/groups/freedesktop/xorg
@ -106,12 +106,12 @@ profile xorg @{exec_path} flags=(attach_disconnected) {
  @{sys}/module/i915/{,**} r,

  @{run}/udev/data/+acpi:* r,             # for acpi
-  @{run}/udev/data/+dmi* r,               # for ?
+  @{run}/udev/data/+dmi* r,               # for motherboard info
  @{run}/udev/data/+drm:card@{int}-* r,   # For screen outputs
  @{run}/udev/data/+hid:* r,              # for HID-Compliant Keyboard
  @{run}/udev/data/+i2c:* r,
  @{run}/udev/data/+input:input@{int} r,  # for mouse, keyboard, touchpad
-  @{run}/udev/data/+pci:* r,              # for VGA compatible controller
+  @{run}/udev/data/+pci:* r,              # Identifies all PCI devices (CPU, GPU, Network, Disks, USB, etc.)
  @{run}/udev/data/+platform:* r,         # for ?
  @{run}/udev/data/+serio:* r,            # for touchpad?
  @{run}/udev/data/+usb* r,               # for USB mouse and keyboard
--- a/apparmor.d/groups/gnome/gdm
+++ b/apparmor.d/groups/gnome/gdm
@ -73,7 +73,7 @@ profile gdm @{exec_path} flags=(attach_disconnected) {
  @{run}/systemd/users/@{uid} r,

  @{run}/udev/data/+drm:card@{int}-* r,   # For screen outputs
-  @{run}/udev/data/+pci:* r,
+  @{run}/udev/data/+pci:* r,              # Identifies all PCI devices (CPU, GPU, Network, Disks, USB, etc.)
  @{run}/udev/data/c226:@{int} r,         # for /dev/dri/card*

  @{run}/udev/tags/master-of-seat/ r,
--- a/apparmor.d/groups/gnome/gnome-control-center
+++ b/apparmor.d/groups/gnome/gnome-control-center
@ -123,9 +123,9 @@ profile gnome-control-center @{exec_path} flags=(attach_disconnected) {
  owner @{run}/user/@{uid}/gnome-shell-disable-extensions w,
  owner @{run}/user/@{uid}/gvfsd/socket-@{rand8} rw,

-  @{run}/udev/data/+dmi:* r,
+  @{run}/udev/data/+dmi:* r,              # for motherboard info
  @{run}/udev/data/+input:input@{int} r,  # for mouse, keyboard, touchpad
-  @{run}/udev/data/+pci:* r,
+  @{run}/udev/data/+pci:* r,              # Identifies all PCI devices (CPU, GPU, Network, Disks, USB, etc.)
  @{run}/udev/data/c13:@{int} r,          # for /dev/input/*
  @{run}/udev/data/c@{dynamic}:@{int} r,  # For dynamic assignment range 234 to 254, 384 to 511
  @{run}/udev/data/n@{int} r,
--- a/apparmor.d/groups/gnome/gnome-shell
+++ b/apparmor.d/groups/gnome/gnome-shell
@ -329,10 +329,10 @@ profile gnome-shell @{exec_path} flags=(attach_disconnected,mediate_deleted) {

  @{run}/udev/data/+input:input@{int} r,  # for mouse, keyboard, touchpad
  @{run}/udev/data/+platform:* r,
-  @{run}/udev/data/+dmi:id r,
+  @{run}/udev/data/+dmi:id r,             # for motherboard info
  @{run}/udev/data/+acpi* r,
-  @{run}/udev/data/+pci:* r,              # for VGA compatible controller
-  @{run}/udev/data/+sound:card@{int} r,   # for sound
+  @{run}/udev/data/+pci:* r,              # Identifies all PCI devices (CPU, GPU, Network, Disks, USB, etc.)
+  @{run}/udev/data/+sound:card@{int} r,   # for sound card
  @{run}/udev/data/+usb* r,               # for USB mouse and keyboard
  @{run}/udev/data/+i2c:* r,
  @{run}/udev/data/+hid:* r,              # for HID-Compliant Keyboard
--- a/apparmor.d/groups/gnome/gsd-media-keys
+++ b/apparmor.d/groups/gnome/gsd-media-keys
@ -105,7 +105,7 @@ profile gsd-media-keys @{exec_path} flags=(attach_disconnected) {

  @{run}/systemd/inhibit/[0-9]*.ref rw,

-  @{run}/udev/data/+sound:card@{int} r,   # For sound
+  @{run}/udev/data/+sound:card@{int} r,   # For sound card
  @{run}/udev/data/c13:@{int} r,          # for /dev/input/*
  @{run}/udev/data/c189:@{int} r,         # For /dev/bus/usb/**

--- a/apparmor.d/groups/kde/kwin_wayland
+++ b/apparmor.d/groups/kde/kwin_wayland
@ -104,12 +104,12 @@ profile kwin_wayland @{exec_path} flags=(attach_disconnected mediate_deleted) {
  @{sys}/devices/**/uevent r,

  @{run}/udev/data/+acpi:* r,             # for ACPI
-  @{run}/udev/data/+dmi* r,               # for ?
+  @{run}/udev/data/+dmi:* r,              # for motherboard info
  @{run}/udev/data/+hid:* r,              # for HID subsystem
  @{run}/udev/data/+input:input@{int} r,  # for mouse, keyboard, touchpad
-  @{run}/udev/data/+pci:* r,
+  @{run}/udev/data/+pci:* r,              # Identifies all PCI devices (CPU, GPU, Network, Disks, USB, etc.)
  @{run}/udev/data/+platform:* r,         # for ?
-  @{run}/udev/data/+sound:card@{int} r,
+  @{run}/udev/data/+sound:card@{int} r,   # for sound card
  @{run}/udev/data/+usb:* r,

  @{run}/udev/data/c13:@{int}  r,         # for /dev/input/*
--- a/apparmor.d/groups/network/ModemManager
+++ b/apparmor.d/groups/network/ModemManager
@ -25,7 +25,7 @@ profile ModemManager @{exec_path} flags=(attach_disconnected) {

  @{exec_path} mr,

-  @{run}/udev/data/+pci:* r,
+  @{run}/udev/data/+pci:* r,              # Identifies all PCI devices (CPU, GPU, Network, Disks, USB, etc.)
  @{run}/udev/data/+platform:* r,
  @{run}/udev/data/+usb:* r,
  @{run}/udev/data/c16[6,7]:@{int} r,     # USB modems
--- a/apparmor.d/groups/network/NetworkManager
+++ b/apparmor.d/groups/network/NetworkManager
@ -132,7 +132,7 @@ profile NetworkManager @{exec_path} flags=(attach_disconnected) {
  @{run}/nscd/db* rwl,
  @{run}/systemd/inhibit/[0-9]*.ref rw,
  @{run}/systemd/users/@{uid} r,
-  @{run}/udev/data/+pci:* r,
+  @{run}/udev/data/+pci:* r,              # Identifies all PCI devices (CPU, GPU, Network, Disks, USB, etc.)
  @{run}/udev/data/+platform:* r,
  @{run}/udev/data/+rfkill:* r,
  @{run}/udev/data/n@{int} r,
--- a/apparmor.d/groups/network/nmcli
+++ b/apparmor.d/groups/network/nmcli
@ -20,7 +20,7 @@ profile nmcli @{exec_path} {
  owner @{HOME}/.nm-vpngate/*.ovpn r,
  owner @{HOME}/.cert/nm-openvpn/*.pem rw,

-  @{run}/udev/data/+pci:* r,
+  @{run}/udev/data/+pci:* r,              # Identifies all PCI devices (CPU, GPU, Network, Disks, USB, etc.)
  @{run}/udev/data/n@{int} r,

  @{sys}/devices/virtual/net/{,**} r,
--- a/apparmor.d/groups/systemd/systemd-backlight
+++ b/apparmor.d/groups/systemd/systemd-backlight
@ -18,9 +18,9 @@ profile systemd-backlight @{exec_path} {

  /var/lib/systemd/backlight/*backlight* rw,

-  @{run}/udev/data/+pci:* r,
  @{run}/udev/data/+backlight:* r,
  @{run}/udev/data/+leds:*backlight* r,
+  @{run}/udev/data/+pci:* r,              # Identifies all PCI devices (CPU, GPU, Network, Disks, USB, etc.)

  @{sys}/bus/ r,
  @{sys}/bus/pci/devices/ r,
--- a/apparmor.d/groups/systemd/systemd-hostnamed
+++ b/apparmor.d/groups/systemd/systemd-hostnamed
@ -35,7 +35,7 @@ profile systemd-hostnamed @{exec_path}  flags=(attach_disconnected) {

  @{run}/systemd/default-hostname rw,
  @{run}/systemd/notify rw,
-  @{run}/udev/data/+dmi:id r,
+  @{run}/udev/data/+dmi:* r,              # for motherboard info

  @{sys}/devices/virtual/dmi/id/ r,
  @{sys}/devices/virtual/dmi/id/bios_date r,
--- a/apparmor.d/groups/systemd/systemd-logind
+++ b/apparmor.d/groups/systemd/systemd-logind
@ -78,7 +78,7 @@ profile systemd-logind @{exec_path} flags=(attach_disconnected) {
  @{run}/udev/data/+backlight:* r,
  @{run}/udev/data/+drm:card@{int}-* r,   # For screen outputs
  @{run}/udev/data/+input:input@{int} r,  # for mouse, keyboard, touchpad
-  @{run}/udev/data/+pci:* r,
+  @{run}/udev/data/+pci:* r,              # Identifies all PCI devices (CPU, GPU, Network, Disks, USB, etc.)
  @{run}/udev/data/c10:@{int}   r,        # For non-serial mice, misc features
  @{run}/udev/data/c13:@{int} r,          # For /dev/input/*
  @{run}/udev/data/c14:@{int} r,          # Open Sound System (OSS)
--- a/apparmor.d/groups/ubuntu/subiquity-console-conf
+++ b/apparmor.d/groups/ubuntu/subiquity-console-conf
@ -54,13 +54,13 @@ profile subiquity-console-conf @{exec_path} {
  @{run}/snapd.socket rw,

  @{run}/udev/data/+acpi:* r,
-  @{run}/udev/data/+dmi* r,
+  @{run}/udev/data/+dmi:* r,              # For motherboard info
  @{run}/udev/data/+drm:card@{int}-* r,   # For screen outputs
  @{run}/udev/data/+input:input@{int} r,  # for mouse, keyboard, touchpad
  @{run}/udev/data/+leds:* r,
-  @{run}/udev/data/+pci:* r,
+  @{run}/udev/data/+pci:* r,              # Identifies all PCI devices (CPU, GPU, Network, Disks, USB, etc.)
  @{run}/udev/data/+platform:* r,
-  @{run}/udev/data/+sound:card@{int} r,   # For sound
+  @{run}/udev/data/+sound:card@{int} r,   # For sound card

  @{run}/udev/data/c1:@{int} r,           # For RAM disk
  @{run}/udev/data/c4:@{int} r,           # For TTY devices
--- a/apparmor.d/groups/virt/libvirtd
+++ b/apparmor.d/groups/virt/libvirtd
@ -160,15 +160,15 @@ profile libvirtd @{exec_path} flags=(attach_disconnected) {

  @{run}/udev/data/+backlight:* r,
  @{run}/udev/data/+bluetooth:* r,
-  @{run}/udev/data/+dmi:id r,
+  @{run}/udev/data/+dmi:* r,              # for motherboard info
  @{run}/udev/data/+drm:card@{int}-* r,   # For screen outputs
  @{run}/udev/data/+hid:* r,
  @{run}/udev/data/+input:input@{int} r,  # For mouse, keyboard, touchpad
  @{run}/udev/data/+leds:* r,
-  @{run}/udev/data/+pci:* r,
+  @{run}/udev/data/+pci:* r,              # Identifies all PCI devices (CPU, GPU, Network, Disks, USB, etc.)
  @{run}/udev/data/+platform:* r,
  @{run}/udev/data/+rfkill:* r,
-  @{run}/udev/data/+sound:card@{int} r,   # For sound
+  @{run}/udev/data/+sound:card@{int} r,   # For sound card
  @{run}/udev/data/+thunderbolt:* r,
  @{run}/udev/data/c1:@{int} r,           # For RAM disk
  @{run}/udev/data/c6:@{int} r,           # For parallel printer devices /dev/lp*
--- a/apparmor.d/groups/virt/virtnodedevd
+++ b/apparmor.d/groups/virt/virtnodedevd
@ -46,14 +46,14 @@ profile virtnodedevd @{exec_path} flags=(attach_disconnected) {

  @{run}/udev/data/+backlight:* r,
  @{run}/udev/data/+bluetooth:* r,
-  @{run}/udev/data/+dmi:id r,
+  @{run}/udev/data/+dmi:* r,              # for motherboard info
  @{run}/udev/data/+drm:card@{int}-* r,   # for screen outputs
  @{run}/udev/data/+input:input@{int} r,  # for mouse, keyboard, touchpad
  @{run}/udev/data/+leds:* r,
-  @{run}/udev/data/+pci:* r,
+  @{run}/udev/data/+pci:* r,              # Identifies all PCI devices (CPU, GPU, Network, Disks, USB, etc.)
  @{run}/udev/data/+platform:* r,
  @{run}/udev/data/+rfkill:* r,
-  @{run}/udev/data/+sound:* r,
+  @{run}/udev/data/+sound:card@{int} r,   # For sound card
  @{run}/udev/data/+thunderbolt:* r,

  @{run}/udev/data/c1:@{int} r,           # For RAM disk
--- a/apparmor.d/profiles-g-l/labwc
+++ b/apparmor.d/profiles-g-l/labwc
@ -42,10 +42,10 @@ profile labwc @{exec_path} flags=(attach_disconnected) {
  @{run}/udev/data/+drm:card@{int}-* r,   # for screen outputs
  @{run}/udev/data/+hid:* r,              # for HID-Compliant Keyboard
  @{run}/udev/data/+hid:* r,              # for HID-Compliant Keyboard
-  @{run}/udev/data/+pci:* r,              # for VGA compatible controller
+  @{run}/udev/data/+pci:* r,              # Identifies all PCI devices (CPU, GPU, Network, Disks, USB, etc.)
  @{run}/udev/data/+platform:* r,         # for ?
  @{run}/udev/data/+serio:* r,            # for touchpad?
-  @{run}/udev/data/+sound:card@{int} r,   # for sound
+  @{run}/udev/data/+sound:card@{int} r,   # for sound card
  @{run}/udev/data/c13:@{int}  r,         # for /dev/input/*
  @{run}/udev/data/c226:@{int} r,         # for /dev/dri/card*

--- a/apparmor.d/profiles-m-r/nvtop
+++ b/apparmor.d/profiles-m-r/nvtop
@ -25,7 +25,7 @@ profile nvtop @{exec_path} flags=(attach_disconnected) {

  @{run}/systemd/inhibit/*.ref r,
  @{run}/udev/data/+drm:card@{int}-* r,   # for screen outputs
-  @{run}/udev/data/+pci:* r,
+  @{run}/udev/data/+pci:* r,              # Identifies all PCI devices (CPU, GPU, Network, Disks, USB, etc.)
  @{run}/udev/data/c226:@{int} r,         # For /dev/dri/card*
  @{run}/udev/data/c@{dynamic}:@{int} r,  # For dynamic assignment range 234 to 254, 384 to 511

--- a/apparmor.d/profiles-s-z/steam
+++ b/apparmor.d/profiles-s-z/steam
@ -149,7 +149,7 @@ profile steam @{exec_path} flags=(attach_disconnected,mediate_deleted,complain)
  owner /tmp/steam_chrome_shmem_uid@{uid}_spid@{int} rw,

  @{run}/udev/data/+input:input@{int} r,  # for mouse, keyboard, touchpad
-  @{run}/udev/data/+pci:* r,
+  @{run}/udev/data/+pci:* r,              # Identifies all PCI devices (CPU, GPU, Network, Disks, USB, etc.)

  @{run}/udev/data/c13:@{int}  r,         # for /dev/input/*
  @{run}/udev/data/c116:@{int} r,         # for ALSA
--- a/apparmor.d/profiles-s-z/switcheroo-control
+++ b/apparmor.d/profiles-s-z/switcheroo-control
@ -21,7 +21,7 @@ profile switcheroo-control @{exec_path} flags=(attach_disconnected) {
  @{exec_path} mr,

  @{run}/udev/data/+drm:card@{int}-* r,   # for screen outputs
-  @{run}/udev/data/+pci:* r,
+  @{run}/udev/data/+pci:* r,              # Identifies all PCI devices (CPU, GPU, Network, Disks, USB, etc.)

  @{run}/udev/data/c226:@{int} r,         # for /dev/dri/card* 

--- a/apparmor.d/profiles-s-z/udisksd
+++ b/apparmor.d/profiles-s-z/udisksd
@ -108,7 +108,7 @@ profile udisksd @{exec_path} flags=(attach_disconnected) {
  @{run}/cryptsetup/ r,
  @{run}/cryptsetup/L* rwk,

-  @{run}/udev/data/+pci:* r,
+  @{run}/udev/data/+pci:* r,              # Identifies all PCI devices (CPU, GPU, Network, Disks, USB, etc.)
  @{run}/udev/data/+platform:* r,
  @{run}/udev/data/+scsi:* r,
  @{run}/udev/data/c@{dynamic}:@{int} r,  # For dynamic assignment range 234 to 254, 384 to 511