move usb autoattach files into securedrop_salt

freedomofpress · May 27, 2024 · 9a6862c · 9a6862c
1 parent 00a07fc
commit 9a6862c
Show file tree

Hide file tree

Showing 2 changed files with 12 additions and 0 deletions.
diff --git a/securedrop_salt/99-sd-devices.rules b/securedrop_salt/99-sd-devices.rules
@@ -0,0 +1,6 @@
+# Class 08 == storage, subclass 06 == SCSI
+# Class 07 == printer, subclass 01 == printer
+# https://www.usb.org/defined-class-codes
+# https://www.usb.org/document-library/mass-storage-class-specification-overview-14
+# https://www.usb.org/document-library/printer-device-class-document-11
+ACTION=="add", SUBSYSTEM=="usb", ENV{DEVTYPE}=="usb_device", ENV{ID_USB_INTERFACES}=="*:0806??:*|*:0701??:*", RUN+="/usr/local/bin/sd-attach-export-device"
diff --git a/securedrop_salt/sd-attach-export-device b/securedrop_salt/sd-attach-export-device
@@ -0,0 +1,6 @@
+#!/usr/bin/bash
+
+# udev action for attaching USB export devices to sd-devices
+
+QDEVNAME="$(basename "$DEVPATH")"
+echo sys-usb "$QDEVNAME" | qrexec-client-vm sd-devices qubes.USBAttach