rules: create /dev/cpu/<n>/cpuid world readable

I don't see any security implications, to be actually useful,
/dev/cpu/<n>/cpuid should be world readable. The cpuid instruction
can be called from userspace anyway, so there is nothing to hide.
The device does not support any write operation, so 0444 should
suffice.

Signed-off-by: Andre Przywara <andre.przywara@amd.com>

diff --git a/rules/rules.d/50-udev-default.rules b/rules/rules.d/50-udev-default.rules
index abc5113cfc1dcd396ebe6a68ee15c50859f0a110..6bf45cce9b0b957d6f9a24db6f95fdea4e8599c9 100644 (file)
--- a/rules/rules.d/50-udev-default.rules
+++ b/rules/rules.d/50-udev-default.rules
@@ -94,7 +94,7 @@ SUBSYSTEM=="aoe", KERNEL=="err", MODE="0440"
 KERNEL=="tun",                 NAME="net/%k", MODE="0666"
 
 # CPU
-KERNEL=="cpu[0-9]*",           NAME="cpu/%n/cpuid"
+KERNEL=="cpu[0-9]*",           NAME="cpu/%n/cpuid", MODE="0444"
 KERNEL=="msr[0-9]*",           NAME="cpu/%n/msr"
 KERNEL=="microcode",           NAME="cpu/microcode", MODE="0600"