1*39cec25bSBrad Davis# 2*39cec25bSBrad Davis# The following are some default rules for devfs(5) mounts. 3*39cec25bSBrad Davis# The format is very simple. Empty lines and lines beginning 4*39cec25bSBrad Davis# with a hash '#' are ignored. If the hash mark occurs anywhere 5*39cec25bSBrad Davis# other than the beginning of a line, it and any subsequent 6*39cec25bSBrad Davis# characters will be ignored. A line in between brackets '[]' 7*39cec25bSBrad Davis# denotes the beginning of a ruleset. In the brackets should 8*39cec25bSBrad Davis# be a name for the rule and its ruleset number. Any other lines 9*39cec25bSBrad Davis# will be considered to be the 'action' part of a rule 10*39cec25bSBrad Davis# passed to the devfs(8) command. These will be passed 11*39cec25bSBrad Davis# "as-is" to the devfs(8) command with the exception that 12*39cec25bSBrad Davis# any references to other rulesets will be expanded first. These 13*39cec25bSBrad Davis# references must include a dollar sign '$' in front of the 14*39cec25bSBrad Davis# name to be expanded properly. 15*39cec25bSBrad Davis# 16*39cec25bSBrad Davis# $FreeBSD$ 17*39cec25bSBrad Davis# 18*39cec25bSBrad Davis 19*39cec25bSBrad Davis# Very basic and secure ruleset: Hide everything. 20*39cec25bSBrad Davis# Used as a basis for other rules. 21*39cec25bSBrad Davis# 22*39cec25bSBrad Davis[devfsrules_hide_all=1] 23*39cec25bSBrad Davisadd hide 24*39cec25bSBrad Davis 25*39cec25bSBrad Davis# Basic devices typically necessary. 26*39cec25bSBrad Davis# Requires: devfsrules_hide_all 27*39cec25bSBrad Davis# 28*39cec25bSBrad Davis[devfsrules_unhide_basic=2] 29*39cec25bSBrad Davisadd path log unhide 30*39cec25bSBrad Davisadd path null unhide 31*39cec25bSBrad Davisadd path zero unhide 32*39cec25bSBrad Davisadd path crypto unhide 33*39cec25bSBrad Davisadd path random unhide 34*39cec25bSBrad Davisadd path urandom unhide 35*39cec25bSBrad Davis 36*39cec25bSBrad Davis# Devices typically needed to support logged-in users. 37*39cec25bSBrad Davis# Requires: devfsrules_hide_all 38*39cec25bSBrad Davis# 39*39cec25bSBrad Davis[devfsrules_unhide_login=3] 40*39cec25bSBrad Davisadd path 'ptyp*' unhide 41*39cec25bSBrad Davisadd path 'ptyq*' unhide 42*39cec25bSBrad Davisadd path 'ptyr*' unhide 43*39cec25bSBrad Davisadd path 'ptys*' unhide 44*39cec25bSBrad Davisadd path 'ptyP*' unhide 45*39cec25bSBrad Davisadd path 'ptyQ*' unhide 46*39cec25bSBrad Davisadd path 'ptyR*' unhide 47*39cec25bSBrad Davisadd path 'ptyS*' unhide 48*39cec25bSBrad Davisadd path 'ptyl*' unhide 49*39cec25bSBrad Davisadd path 'ptym*' unhide 50*39cec25bSBrad Davisadd path 'ptyn*' unhide 51*39cec25bSBrad Davisadd path 'ptyo*' unhide 52*39cec25bSBrad Davisadd path 'ptyL*' unhide 53*39cec25bSBrad Davisadd path 'ptyM*' unhide 54*39cec25bSBrad Davisadd path 'ptyN*' unhide 55*39cec25bSBrad Davisadd path 'ptyO*' unhide 56*39cec25bSBrad Davisadd path 'ttyp*' unhide 57*39cec25bSBrad Davisadd path 'ttyq*' unhide 58*39cec25bSBrad Davisadd path 'ttyr*' unhide 59*39cec25bSBrad Davisadd path 'ttys*' unhide 60*39cec25bSBrad Davisadd path 'ttyP*' unhide 61*39cec25bSBrad Davisadd path 'ttyQ*' unhide 62*39cec25bSBrad Davisadd path 'ttyR*' unhide 63*39cec25bSBrad Davisadd path 'ttyS*' unhide 64*39cec25bSBrad Davisadd path 'ttyl*' unhide 65*39cec25bSBrad Davisadd path 'ttym*' unhide 66*39cec25bSBrad Davisadd path 'ttyn*' unhide 67*39cec25bSBrad Davisadd path 'ttyo*' unhide 68*39cec25bSBrad Davisadd path 'ttyL*' unhide 69*39cec25bSBrad Davisadd path 'ttyM*' unhide 70*39cec25bSBrad Davisadd path 'ttyN*' unhide 71*39cec25bSBrad Davisadd path 'ttyO*' unhide 72*39cec25bSBrad Davisadd path ptmx unhide 73*39cec25bSBrad Davisadd path pts unhide 74*39cec25bSBrad Davisadd path 'pts/*' unhide 75*39cec25bSBrad Davisadd path fd unhide 76*39cec25bSBrad Davisadd path 'fd/*' unhide 77*39cec25bSBrad Davisadd path stdin unhide 78*39cec25bSBrad Davisadd path stdout unhide 79*39cec25bSBrad Davisadd path stderr unhide 80*39cec25bSBrad Davis 81*39cec25bSBrad Davis# Devices usually found in a jail. 82*39cec25bSBrad Davis# 83*39cec25bSBrad Davis[devfsrules_jail=4] 84*39cec25bSBrad Davisadd include $devfsrules_hide_all 85*39cec25bSBrad Davisadd include $devfsrules_unhide_basic 86*39cec25bSBrad Davisadd include $devfsrules_unhide_login 87*39cec25bSBrad Davisadd path fuse unhide 88*39cec25bSBrad Davisadd path zfs unhide 89