Joan Lledó, le dim. 23 févr. 2020 18:12:24 +0100, a ecrit: > El 22/2/20 a les 23:19, Samuel Thibault ha escrit: > > AIUI you have commit rights, so you can push it yourself? > > Done!
Good :) > > I'm wondering which way would be more natural to users: first rule wins > > versus last rule wins. > > No idea. Another option is to make the most specific scope win, e.g: > > -U 1000 -b 0 -s 5 -U 1001 -b 0 > > this would give the device 00:05.* to 1000 since it's an exception of > the rule 00:*.* to 1001. > > Is it worth to write that? That could be more intuitive indeed. This looks like how ACLs work: uid-based rules apply first, then gid-based rules, then general rules. Here, exact function match rules would apply first, then slot match rules, then bus match rules, then domain match rules. (there would be no point in providing e.g. access to only function 0 of all slots). Samuel
