udev lock to application username

jurkovic-nikola · Dec 14, 2024 · 4edc6e2 · 4edc6e2
1 parent 09bd841
commit 4edc6e2
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 3 deletions.
diff --git a/device-permissions.sh b/device-permissions.sh
@@ -3,6 +3,7 @@ echo "Cleanup..."
 sudo rm -f /etc/udev/rules.d/99-corsair-*.rules
 
 echo "Setting udev device permissions..."
+APP_USERNAME="openlinkhub"
 lsusb -d 1b1c: | while read -r line; do
 ids=$(echo "$line" | awk '{print $6}')
 vendor_id=$(echo "$ids" | cut -d':' -f1)
@@ -19,11 +20,11 @@ done
 
 if [ "$match" = true ]; then
 cat > /etc/udev/rules.d/99-corsair-"$device_id".rules <<- EOM
-SUBSYSTEMS=="usb", ATTRS{idVendor}=="$vendor_id", ATTRS{idProduct}=="$device_id", MODE="0666"
+SUBSYSTEMS=="usb", ATTRS{idVendor}=="$vendor_id", ATTRS{idProduct}=="$device_id", MODE="0600", OWNER="$APP_USERNAME"
 EOM
 else
 cat > /etc/udev/rules.d/99-corsair-"$device_id".rules <<- EOM
-KERNEL=="hidraw*", SUBSYSTEMS=="usb", ATTRS{idVendor}=="$vendor_id", ATTRS{idProduct}=="$device_id", MODE="0666"
+KERNEL=="hidraw*", SUBSYSTEMS=="usb", ATTRS{idVendor}=="$vendor_id", ATTRS{idProduct}=="$device_id", MODE="0600", OWNER="$APP_USERNAME"
 EOM
 fi
 done

diff --git a/src/devices/devices.go b/src/devices/devices.go
@@ -101,7 +101,7 @@ type Product struct {
 }
 
 var (
-	expectedPermission        = 0666
+	expectedPermission        = 0600
 	vendorId           uint16 = 6940 // Corsair
 	interfaceId               = 0
 	devices                   = make(map[string]*Device, 0)