<?xml version="1.0" encoding="UTF-8"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en-gb">
<link rel="self" type="application/atom+xml" href="https://forum.yubico.com/feed.php?f=33&amp;t=1643" />

<title>Yubico Forum</title>
<subtitle>...visit our web-store at</subtitle>
<link href="https://forum.yubico.com/index.php" />
<updated>2014-12-04T02:18:21+01:00</updated>

<author><name><![CDATA[Yubico Forum]]></name></author>
<id>https://forum.yubico.com/feed.php?f=33&amp;t=1643</id>
<entry>
<author><name><![CDATA[geoff]]></name></author>
<updated>2014-12-04T02:18:21+01:00</updated>
<published>2014-12-04T02:18:21+01:00</published>
<id>https://forum.yubico.com/viewtopic.php?t=1643&amp;p=6441#p6441</id>
<link href="https://forum.yubico.com/viewtopic.php?t=1643&amp;p=6441#p6441"/>
<title type="html"><![CDATA[Universal udev rules]]></title>

<content type="html" xml:base="https://forum.yubico.com/viewtopic.php?t=1643&amp;p=6441#p6441"><![CDATA[
Rather than update Linux udev rules for every new device that supports fido u2f, I followed the recommendation in this thread <!-- m --><a class="postlink" href="https://www.mail-archive.com/systemd-devel@lists.freedesktop.org/msg24330.html">https://www.mail-archive.com/systemd-de ... 24330.html</a><!-- m --> and wrote a short program that reads hid device usage pages looking for 0xF1D0.  The code is here <!-- m --><a class="postlink" href="https://gist.github.com/ghoff/f0675b40b7f0d686a980">https://gist.github.com/ghoff/f0675b40b7f0d686a980</a><!-- m --><br />With the u2f-detect program compiled and placed in /lib/udev, the only rule that needs to be in /lib/udev/rules.d/70-u2f.rules is <br /><br /><div class="codetitle"><b>Code:</b></div><div class="codecontent">KERNEL==&quot;hidraw*&quot;, SUBSYSTEM==&quot;hidraw&quot;, ENV{ID_SECURITY_TOKEN}!=&quot;?*&quot;, IMPORT{program}=&quot;u2f-detect $devnode&quot;<br /></div><br />The rules in the existing 70-uaccess.rules will grant the local user access to the /dev/hidraw? u2f device.  This has been tested on Ubuntu 14.04 with a Yubico security key.  It should work equally well with a NEO, NEO-n, the security key from plug-up and any future device.<p>Statistics: Posted by <a href="https://forum.yubico.com/memberlist.php?mode=viewprofile&amp;u=270">geoff</a> — Thu Dec 04, 2014 2:18 am</p><hr />
]]></content>
</entry>
</feed>