139cec25bSBrad Davis# 2*088cc7d2SAlexander Ziaee# The following are some default rules for devfs(4) mounts. 339cec25bSBrad Davis# The format is very simple. Empty lines and lines beginning 439cec25bSBrad Davis# with a hash '#' are ignored. If the hash mark occurs anywhere 539cec25bSBrad Davis# other than the beginning of a line, it and any subsequent 639cec25bSBrad Davis# characters will be ignored. A line in between brackets '[]' 739cec25bSBrad Davis# denotes the beginning of a ruleset. In the brackets should 839cec25bSBrad Davis# be a name for the rule and its ruleset number. Any other lines 939cec25bSBrad Davis# will be considered to be the 'action' part of a rule 1039cec25bSBrad Davis# passed to the devfs(8) command. These will be passed 1139cec25bSBrad Davis# "as-is" to the devfs(8) command with the exception that 1239cec25bSBrad Davis# any references to other rulesets will be expanded first. These 1339cec25bSBrad Davis# references must include a dollar sign '$' in front of the 1439cec25bSBrad Davis# name to be expanded properly. 1539cec25bSBrad Davis# 1639cec25bSBrad Davis# 1739cec25bSBrad Davis 1839cec25bSBrad Davis# Very basic and secure ruleset: Hide everything. 1939cec25bSBrad Davis# Used as a basis for other rules. 2039cec25bSBrad Davis# 2139cec25bSBrad Davis[devfsrules_hide_all=1] 2239cec25bSBrad Davisadd hide 2339cec25bSBrad Davis 2439cec25bSBrad Davis# Basic devices typically necessary. 2539cec25bSBrad Davis# Requires: devfsrules_hide_all 2639cec25bSBrad Davis# 2739cec25bSBrad Davis[devfsrules_unhide_basic=2] 2839cec25bSBrad Davisadd path null unhide 2939cec25bSBrad Davisadd path zero unhide 3039cec25bSBrad Davisadd path crypto unhide 3139cec25bSBrad Davisadd path random unhide 3239cec25bSBrad Davisadd path urandom unhide 3339cec25bSBrad Davis 3439cec25bSBrad Davis# Devices typically needed to support logged-in users. 3539cec25bSBrad Davis# Requires: devfsrules_hide_all 3639cec25bSBrad Davis# 3739cec25bSBrad Davis[devfsrules_unhide_login=3] 3839cec25bSBrad Davisadd path 'ptyp*' unhide 3939cec25bSBrad Davisadd path 'ptyq*' unhide 4039cec25bSBrad Davisadd path 'ptyr*' unhide 4139cec25bSBrad Davisadd path 'ptys*' unhide 4239cec25bSBrad Davisadd path 'ptyP*' unhide 4339cec25bSBrad Davisadd path 'ptyQ*' unhide 4439cec25bSBrad Davisadd path 'ptyR*' unhide 4539cec25bSBrad Davisadd path 'ptyS*' unhide 4639cec25bSBrad Davisadd path 'ptyl*' unhide 4739cec25bSBrad Davisadd path 'ptym*' unhide 4839cec25bSBrad Davisadd path 'ptyn*' unhide 4939cec25bSBrad Davisadd path 'ptyo*' unhide 5039cec25bSBrad Davisadd path 'ptyL*' unhide 5139cec25bSBrad Davisadd path 'ptyM*' unhide 5239cec25bSBrad Davisadd path 'ptyN*' unhide 5339cec25bSBrad Davisadd path 'ptyO*' unhide 5439cec25bSBrad Davisadd path 'ttyp*' unhide 5539cec25bSBrad Davisadd path 'ttyq*' unhide 5639cec25bSBrad Davisadd path 'ttyr*' unhide 5739cec25bSBrad Davisadd path 'ttys*' unhide 5839cec25bSBrad Davisadd path 'ttyP*' unhide 5939cec25bSBrad Davisadd path 'ttyQ*' unhide 6039cec25bSBrad Davisadd path 'ttyR*' unhide 6139cec25bSBrad Davisadd path 'ttyS*' unhide 6239cec25bSBrad Davisadd path 'ttyl*' unhide 6339cec25bSBrad Davisadd path 'ttym*' unhide 6439cec25bSBrad Davisadd path 'ttyn*' unhide 6539cec25bSBrad Davisadd path 'ttyo*' unhide 6639cec25bSBrad Davisadd path 'ttyL*' unhide 6739cec25bSBrad Davisadd path 'ttyM*' unhide 6839cec25bSBrad Davisadd path 'ttyN*' unhide 6939cec25bSBrad Davisadd path 'ttyO*' unhide 7039cec25bSBrad Davisadd path ptmx unhide 7139cec25bSBrad Davisadd path pts unhide 7239cec25bSBrad Davisadd path 'pts/*' unhide 7339cec25bSBrad Davisadd path fd unhide 7439cec25bSBrad Davisadd path 'fd/*' unhide 7539cec25bSBrad Davisadd path stdin unhide 7639cec25bSBrad Davisadd path stdout unhide 7739cec25bSBrad Davisadd path stderr unhide 7839cec25bSBrad Davis 7939cec25bSBrad Davis# Devices usually found in a jail. 8039cec25bSBrad Davis# 8139cec25bSBrad Davis[devfsrules_jail=4] 8239cec25bSBrad Davisadd include $devfsrules_hide_all 8339cec25bSBrad Davisadd include $devfsrules_unhide_basic 8439cec25bSBrad Davisadd include $devfsrules_unhide_login 8539cec25bSBrad Davisadd path fuse unhide 8639cec25bSBrad Davisadd path zfs unhide 879e9be081SKristof Provost 889e9be081SKristof Provost[devfsrules_jail_vnet=5] 897acd322eSZhenlei Huangadd include $devfsrules_hide_all 907acd322eSZhenlei Huangadd include $devfsrules_unhide_basic 917acd322eSZhenlei Huangadd include $devfsrules_unhide_login 929e9be081SKristof Provostadd include $devfsrules_jail 939e9be081SKristof Provostadd path pf unhide 94