Attachment 188273 Details for Bug 196754 – u2f-devd port

[patch] u2f-devd port

u2f-devd.patch (text/plain), 7.80 KB, created by Val Packett on 2017-11-25 13:40:14 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Val Packett

Created: 2017-11-25 13:40:14 UTC

Size: 7.80 KB

patch

obsolete

>diff --git c/security/libu2f-host/Makefile i/security/libu2f-host/Makefile
>index 4340dd3f3a61..c159bd8e077e 100644
>--- c/security/libu2f-host/Makefile
>+++ i/security/libu2f-host/Makefile
>@@ -15,6 +15,7 @@ BUILD_DEPENDS=	gengetopt:devel/gengetopt \
> 		help2man:misc/help2man
> LIB_DEPENDS=	libhidapi.so:comms/hidapi \
> 		libjson-c.so:devel/json-c
>+RUN_DEPENDS=	${LOCALBASE}/etc/devd/u2f.conf:security/u2f-devd
> 
> USES=	autoreconf pkgconfig gmake libtool
> GNU_CONFIGURE=	yes
>@@ -26,12 +27,4 @@ GH_ACCOUNT=	Yubico
> CONFIGURE_ARGS=	--disable-gtk-doc
> INSTALL_TARGET=	install-strip
> 
>-SUB_FILES=	pkg-message
>-
>-GROUPS=	u2f
>-
>-post-install:
>-	${INSTALL_DATA} ${WRKSRC}/u2f.conf.sample \
>-		${STAGEDIR}${PREFIX}/etc/devd
>-
> .include <bsd.port.mk>
>diff --git c/security/libu2f-host/files/pkg-message.in i/security/libu2f-host/files/pkg-message.in
>deleted file mode 100644
>index 123a08a44e53..000000000000
>--- c/security/libu2f-host/files/pkg-message.in
>+++ /dev/null
>@@ -1,13 +0,0 @@
>-======================================================================
>-
>-The package requires read/write access to USB devices. To facilitate
>-such access it comes with a devd.conf(5) file, but you still need to
>-restart devd(8), add the desired users to "u2f" group and log those
>-out of the current session. For example:
>-
>-$ pw group mod u2f -m <user>
>-$ shutdown -r now
>-
>-For details, see %%PREFIX%%/etc/devd/u2f.conf
>-
>-======================================================================
>diff --git c/security/libu2f-host/pkg-plist i/security/libu2f-host/pkg-plist
>index 974465f14763..fc23819bc8e6 100644
>--- c/security/libu2f-host/pkg-plist
>+++ i/security/libu2f-host/pkg-plist
>@@ -1,5 +1,4 @@
> bin/u2f-host
>-@sample etc/devd/u2f.conf.sample
> include/u2f-host/u2f-host-types.h
> include/u2f-host/u2f-host-version.h
> include/u2f-host/u2f-host.h
>diff --git c/security/u2f-devd/Makefile i/security/u2f-devd/Makefile
>new file mode 100644
>index 000000000000..b8e4060139c3
>--- /dev/null
>+++ i/security/u2f-devd/Makefile
>@@ -0,0 +1,23 @@
>+# $FreeBSD$
>+
>+PORTNAME=	u2f-devd
>+PORTVERSION=	1.0.0
>+CATEGORIES=	security
>+MASTER_SITES=	#
>+DISTFILES=	#
>+
>+MAINTAINER=	greg@unrelenting.technology
>+COMMENT=	devd hotplug rules for Universal 2nd Factor (U2F) tokens
>+
>+LICENSE=	BSD2CLAUSE
>+
>+NO_BUILD=	yes
>+SUB_FILES=	pkg-message
>+PLIST_FILES=	etc/devd/u2f.conf
>+
>+GROUPS=	u2f
>+
>+do-install:
>+	${INSTALL_DATA} ${FILESDIR}/u2f.conf ${STAGEDIR}${PREFIX}/etc/devd
>+
>+.include <bsd.port.mk>
>diff --git c/security/u2f-devd/files/pkg-message.in i/security/u2f-devd/files/pkg-message.in
>new file mode 100644
>index 000000000000..4972d0b25bdd
>--- /dev/null
>+++ i/security/u2f-devd/files/pkg-message.in
>@@ -0,0 +1,14 @@
>+======================================================================
>+
>+U2F authentication requires read/write access to USB devices. To
>+facilitate such access it comes with a devd.conf(5) file, but you
>+still need to restart devd(8), add the desired users to "u2f" group
>+and log those out of the current session. For example:
>+
>+# service devd restart
>+# pw group mod u2f -m <user>
>+$ exit
>+
>+For details, see %%PREFIX%%/etc/devd/u2f.conf
>+
>+======================================================================
>diff --git c/security/u2f-devd/files/u2f.conf i/security/u2f-devd/files/u2f.conf
>new file mode 100644
>index 000000000000..05a4c8bbba22
>--- /dev/null
>+++ i/security/u2f-devd/files/u2f.conf
>@@ -0,0 +1,163 @@
>+# Allow members of group u2f to access U2F authentication tokens.
>+# 'notify' rules work on /dev/usb/* (used by libu2f-host),
>+# 'attach' rules work on /dev/uhid* (used by web browsers)
>+
>+# Yubico Yubikey
>+notify 100 {
>+	match "system"		"USB";
>+	match "subsystem"	"DEVICE";
>+	match "type"		"ATTACH";
>+	match "vendor"		"0x1050";
>+	match "product"		"(0x0113|0x0114|0x0115|0x0116|0x0120|0x0200|0x0420|0x0403|0x0406|0x0407|0x0410)";
>+	action	"chgrp u2f /dev/$cdev; chmod g+rw /dev/$cdev";
>+};
>+
>+attach 100 {
>+	match "vendor"		"0x1050";
>+	match "product"		"(0x0113|0x0114|0x0115|0x0116|0x0120|0x0200|0x0420|0x0403|0x0406|0x0407|0x0410)";
>+	action	"chgrp u2f /dev/$device-name; chmod g+rw /dev/$device-name";
>+};
>+
>+# Happlink (formerly Plug-Up) Security KEY
>+notify 100 {
>+	match "system"		"USB";
>+	match "subsystem"	"DEVICE";
>+	match "type"		"ATTACH";
>+	match "vendor"		"0x2581";
>+	match "product"		"0xf1d0";
>+	action "chgrp u2f /dev/$cdev; chmod g+rw /dev/$cdev";
>+};
>+
>+attach 100 {
>+	match "vendor"		"0x2581";
>+	match "product"		"0xf1d0";
>+	action	"chgrp u2f /dev/$device-name; chmod g+rw /dev/$device-name";
>+};
>+
>+# Neowave Keydo and Keydo AES
>+notify 100 {
>+	match "system"		"USB";
>+	match "subsystem"	"DEVICE";
>+	match "type"		"ATTACH";
>+	match "vendor"		"0x1e0d";
>+	match "product"		"(0xf1d0|0xf1ae)";
>+	action "chgrp u2f /dev/$cdev; chmod g+rw /dev/$cdev";
>+};
>+
>+attach 100 {
>+	match "vendor"		"0x1e0d";
>+	match "product"		"(0xf1d0|0xf1ae)";
>+	action	"chgrp u2f /dev/$device-name; chmod g+rw /dev/$device-name";
>+};
>+
>+# HyperSecu HyperFIDO
>+notify 100 {
>+	match "system"		"USB";
>+	match "subsystem"	"DEVICE";
>+	match "type"		"ATTACH";
>+	match "vendor"		"(0x096e|0x2ccf)";
>+	match "product"		"0x0880";
>+	action "chgrp u2f /dev/$cdev; chmod g+rw /dev/$cdev";
>+};
>+
>+attach 100 {
>+	match "vendor"		"(0x096e|0x2ccf)";
>+	match "product"		"0x0880";
>+	action	"chgrp u2f /dev/$device-name; chmod g+rw /dev/$device-name";
>+};
>+
>+# Feitian ePass FIDO
>+notify 100 {
>+	match "system"		"USB";
>+	match "subsystem"	"DEVICE";
>+	match "type"		"ATTACH";
>+	match "vendor"		"0x096e";
>+	match "product"		"(0x0850|0x0852|0x0853|0x0854|0x0856|0x0858|0x085a|0x085b)";
>+	action "chgrp u2f /dev/$cdev; chmod g+rw /dev/$cdev";
>+};
>+
>+attach 100 {
>+	match "vendor"		"0x096e";
>+	match "product"		"(0x0850|0x0852|0x0853|0x0854|0x0856|0x0858|0x085a|0x085b)";
>+	action	"chgrp u2f /dev/$device-name; chmod g+rw /dev/$device-name";
>+};
>+
>+# JaCarta U2F
>+notify 100 {
>+	match "system"		"USB";
>+	match "subsystem"	"DEVICE";
>+	match "type"		"ATTACH";
>+	match "vendor"		"0x24dc";
>+	match "product"		"0x0101";
>+	action "chgrp u2f /dev/$cdev; chmod g+rw /dev/$cdev";
>+};
>+
>+attach 100 {
>+	match "vendor"		"0x24dc";
>+	match "product"		"0x0101";
>+	action	"chgrp u2f /dev/$device-name; chmod g+rw /dev/$device-name";
>+};
>+
>+# U2F Zero
>+notify 100 {
>+	match "system"		"USB";
>+	match "subsystem"	"DEVICE";
>+	match "type"		"ATTACH";
>+	match "vendor"		"0x10c4";
>+	match "product"		"0x8acf";
>+	action "chgrp u2f /dev/$cdev; chmod g+rw /dev/$cdev";
>+};
>+
>+attach 100 {
>+	match "vendor"		"0x10c4";
>+	match "product"		"0x8acf";
>+	action	"chgrp u2f /dev/$device-name; chmod g+rw /dev/$device-name";
>+};
>+
>+# VASCO SeccureClick
>+notify 100 {
>+	match "system"		"USB";
>+	match "subsystem"	"DEVICE";
>+	match "type"		"ATTACH";
>+	match "vendor"		"0x1a44";
>+	match "product"		"0x00bb";
>+	action "chgrp u2f /dev/$cdev; chmod g+rw /dev/$cdev";
>+};
>+
>+attach 100 {
>+	match "vendor"		"0x1a44";
>+	match "product"		"0x00bb";
>+	action	"chgrp u2f /dev/$device-name; chmod g+rw /dev/$device-name";
>+};
>+
>+# Bluink Key
>+notify 100 {
>+	match "system"		"USB";
>+	match "subsystem"	"DEVICE";
>+	match "type"		"ATTACH";
>+	match "vendor"		"0x2abe";
>+	match "product"		"0x1002";
>+	action "chgrp u2f /dev/$cdev; chmod g+rw /dev/$cdev";
>+};
>+
>+attach 100 {
>+	match "vendor"		"0x2abe";
>+	match "product"		"0x1002";
>+	action	"chgrp u2f /dev/$device-name; chmod g+rw /dev/$device-name";
>+};
>+
>+# Thetis Key
>+notify 100 {
>+	match "system"		"USB";
>+	match "subsystem"	"DEVICE";
>+	match "type"		"ATTACH";
>+	match "vendor"		"0x1ea8";
>+	match "product"		"0xf025";
>+	action "chgrp u2f /dev/$cdev; chmod g+rw /dev/$cdev";
>+};
>+
>+attach 100 {
>+	match "vendor"		"0x1ea8";
>+	match "product"		"0xf025";
>+	action	"chgrp u2f /dev/$device-name; chmod g+rw /dev/$device-name";
>+};
>diff --git c/security/u2f-devd/pkg-descr i/security/u2f-devd/pkg-descr
>new file mode 100644
>index 000000000000..6cbe47002baf
>--- /dev/null
>+++ i/security/u2f-devd/pkg-descr
>@@ -0,0 +1,2 @@
>+Automatic device permission handling for Universal 2nd Factor (U2F) USB
>+authentication tokens.

Actions: View | Diff

Attachments on bug 196754: 183157 | 187829 | 188231 | 188273 | 188626