Add ACL for media player USB devices

Originally we added an ACL for some particular mobile phone product IDs to
enable users to run e. g. the Android SDK as non-root. This was removed in
232f180 as we don't want to maintain product/vendor ID lists in udev.

However, we already know from media-player-info that devices like this are
media players. There is little reason to deny user access to those, so add back
a generic rule which adds an ACL to media player raw USB devices.

https://launchpad.net/bugs/316215

diff --git a/extras/udev-acl/70-acl.rules b/extras/udev-acl/70-acl.rules
index 66375de9f6959df4757c012ced259815dd0d4f74..e3ff31c22e5c96af6478a715aa39928f7ba025bd 100644 (file)
--- a/extras/udev-acl/70-acl.rules
+++ b/extras/udev-acl/70-acl.rules
@@ -59,6 +59,9 @@ ENV{COLOR_MEASUREMENT_DEVICE}=="*?", TAG+="udev-acl"
 # DDC/CI device, usually high-end monitors such as the DreamColor
 ENV{DDC_DEVICE}=="*?", TAG+="udev-acl"
 
+# media player raw devices (for user-mode drivers, Android SDK, etc.)
+SUBSYSTEM=="usb", ENV{ID_MEDIA_PLAYER}=="?*", TAG+="udev-acl"
+
 # apply ACL for all locally logged in users
 LABEL="acl_apply", TAG=="udev-acl", TEST=="/var/run/ConsoleKit/database", \
   RUN+="udev-acl --action=$env{ACTION} --device=$env{DEVNAME}"