[For FAQ?] UDEV Magic about icestorm HOT 6 CLOSED

The good Debian.
I can comment this: From the Security Implications of System Groups:

To manage removable drives without root privileges, you have to use the groups cdrom for optical drives. Optical drives can usually be mounted in according to the rules in /etc/fstab, but for other removable drives the group plugdev may be more practical.

And as in the both udev rules, the last one contains the group membership correctly, so for this reason you're able to use udev/pmount without root privileges.

Something you can check is what groups your user belongs to, and if you add yourself to plugdev (I'll probably will not do that if this is a multi user - critical server) you should be able to stick in the original udev rule (the first one you showed).

Source:
https://wiki.debian.org/SystemGroups

from icestorm.

Heh, azonenberg/openfpga had this same issue. According to @cyrozap,

`TAG+="uaccess"` is for systemd compatibility and `MODE="660", GROUP="plugdev"` is for non-systemd systems. This is the same pattern OpenOCD uses for its udev rules.

So the proposed change to the FAQ should be correct.

from icestorm.

Updated the website.

from icestorm.

Without TAG+="uaccess" I could not use a group based UDEV rule despite being in the right group and the MODE:="0666" way to allow access for everyone did not work too.

TAG+="uaccess" seems to be what makes the difference...

from icestorm.

Ahhhh... systemd stuff... good to have an explanation!
Thanks!

from icestorm.

I feel kinda dumb after actually reading the line, as it clearly says GROUP="plugdev", but maybe it'd be helpful to explicitly say next to it that you also need to be in the plugdev group for this to apply?

from icestorm.