OXIESEC PANEL

Name	Size	Modified	Perms
📁 ..	-	04/09/2025 07:08:44 PM	rwxr-xr-x
📄 01-md-raid-creating.rules	321 bytes	03/19/2025 02:13:52 PM	rw-r--r--
📄 10-dm.rules	7.32 KB	10/02/2024 08:49:46 PM	r--r--r--
📄 11-dm-parts.rules	1.41 KB	10/02/2024 07:55:51 PM	rw-r--r--
📄 13-dm-disk.rules	2.19 KB	10/02/2024 08:49:46 PM	r--r--r--
📄 40-elevator.rules	728 bytes	03/18/2025 04:11:25 AM	rw-r--r--
📄 40-redhat.rules	1.97 KB	03/18/2025 04:11:30 AM	rw-r--r--
📄 40-usb-blacklist.rules	458 bytes	10/31/2021 01:36:51 AM	rw-r--r--
📄 50-udev-default.rules	5.28 KB	03/18/2025 04:13:52 AM	rw-r--r--
📄 60-autosuspend.rules	704 bytes	10/31/2022 06:59:18 PM	rw-r--r--
📄 60-block.rules	703 bytes	10/31/2022 06:59:18 PM	rw-r--r--
📄 60-cdrom_id.rules	1.05 KB	10/31/2022 06:59:18 PM	rw-r--r--
📄 60-drm.rules	413 bytes	10/31/2022 06:59:18 PM	rw-r--r--
📄 60-evdev.rules	990 bytes	10/31/2022 06:59:18 PM	rw-r--r--
📄 60-fido-id.rules	491 bytes	10/31/2022 06:59:18 PM	rw-r--r--
📄 60-input-id.rules	282 bytes	10/31/2022 06:59:18 PM	rw-r--r--
📄 60-net.rules	129 bytes	03/06/2024 01:09:57 PM	rw-r--r--
📄 60-persistent-alsa.rules	616 bytes	10/31/2022 06:59:18 PM	rw-r--r--
📄 60-persistent-input.rules	2.66 KB	10/31/2022 06:59:18 PM	rw-r--r--
📄 60-persistent-storage-tape.rules	2.15 KB	10/31/2022 06:59:18 PM	rw-r--r--
📄 60-persistent-storage.rules	10.65 KB	03/18/2025 04:11:30 AM	rw-r--r--
📄 60-persistent-v4l.rules	769 bytes	10/31/2022 06:59:18 PM	rw-r--r--
📄 60-sensor.rules	1.58 KB	10/31/2022 06:59:18 PM	rw-r--r--
📄 60-serial.rules	1.11 KB	03/18/2025 04:11:23 AM	rw-r--r--
📄 60-tpm-udev.rules	243 bytes	04/26/2024 11:53:05 AM	rw-r--r--
📄 60_flashrom.rules	3.31 KB	02/11/2022 09:46:41 PM	rw-r--r--
📄 61-scsi-sg3_id.rules	6.21 KB	11/05/2021 11:31:50 PM	rw-r--r--
📄 63-fc-wwpn-id.rules	624 bytes	04/29/2019 07:13:59 AM	rw-r--r--
📄 63-md-raid-arrays.rules	2.57 KB	03/19/2025 02:13:52 PM	rw-r--r--
📄 63-scsi-sg3_symlink.rules	2.8 KB	10/31/2021 01:36:51 AM	rw-r--r--
📄 64-btrfs.rules	616 bytes	03/18/2025 04:13:52 AM	rw-r--r--
📄 64-md-raid-assembly.rules	2.31 KB	03/19/2025 02:13:52 PM	rw-r--r--
📄 65-libwacom.rules	1.13 KB	12/02/2021 12:58:26 AM	rw-r--r--
📄 65-scsi-cciss_id.rules	732 bytes	09/18/2017 07:15:01 PM	rw-r--r--
📄 66-kpartx.rules	1.36 KB	10/02/2024 07:55:51 PM	rw-r--r--
📄 66-md-auto-readd.rules	895 bytes	03/19/2025 11:57:49 AM	rw-r--r--
📄 68-del-part-nodes.rules	1.12 KB	10/02/2024 07:55:51 PM	rw-r--r--
📄 69-md-clustered-confirm-device.rules	858 bytes	03/19/2025 02:13:52 PM	rw-r--r--
📄 70-camera.rules	281 bytes	10/31/2022 06:59:18 PM	rw-r--r--
📄 70-joystick.rules	432 bytes	10/31/2022 06:59:18 PM	rw-r--r--
📄 70-memory.rules	184 bytes	10/31/2022 06:59:18 PM	rw-r--r--
📄 70-mouse.rules	734 bytes	10/31/2022 06:59:18 PM	rw-r--r--
📄 70-power-switch.rules	576 bytes	10/31/2022 06:59:18 PM	rw-r--r--
📄 70-touchpad.rules	473 bytes	10/31/2022 06:59:18 PM	rw-r--r--
📄 70-uaccess.rules	3.38 KB	03/18/2025 04:13:52 AM	rw-r--r--
📄 71-prefixdevname.rules	403 bytes	03/25/2022 03:11:06 PM	rw-r--r--
📄 71-seat.rules	3.73 KB	03/18/2025 04:13:52 AM	rw-r--r--
📄 73-seat-late.rules	643 bytes	03/18/2025 04:13:52 AM	rw-r--r--
📄 75-net-description.rules	512 bytes	03/18/2025 04:11:35 AM	rw-r--r--
📄 75-probe_mtd.rules	174 bytes	10/31/2022 06:59:18 PM	rw-r--r--
📄 78-sound-card.rules	4.7 KB	10/31/2022 06:59:18 PM	rw-r--r--
📄 80-drivers.rules	600 bytes	10/31/2022 06:59:18 PM	rw-r--r--
📄 80-libinput-device-groups.rules	207 bytes	08/02/2023 02:42:22 PM	rw-r--r--
📄 80-net-setup-link.rules	295 bytes	10/31/2022 06:59:18 PM	rw-r--r--
📄 80-udisks2.rules	10.39 KB	10/02/2024 09:58:50 PM	rw-r--r--
📄 81-net-dhcp.rules	528 bytes	10/31/2022 06:59:18 PM	rw-r--r--
📄 84-nm-drivers.rules	533 bytes	08/26/2024 09:29:05 AM	rw-r--r--
📄 85-nm-unmanaged.rules	1.97 KB	08/26/2024 09:29:05 AM	rw-r--r--
📄 90-fwupd-devices.rules	281 bytes	02/08/2024 02:31:15 PM	rw-r--r--
📄 90-libinput-fuzz-override.rules	1.07 KB	08/02/2023 02:42:22 PM	rw-r--r--
📄 90-nm-thunderbolt.rules	588 bytes	08/26/2024 09:29:05 AM	rw-r--r--
📄 90-pipewire-alsa.rules	12.92 KB	01/10/2024 12:30:27 PM	rw-r--r--
📄 90-vconsole.rules	489 bytes	03/18/2025 04:13:52 AM	rw-r--r--
📄 90-wireshark-usbmon.rules	48 bytes	10/02/2024 11:59:37 PM	rw-r--r--
📄 91-drm-modeset.rules	56 bytes	10/01/2024 04:20:21 PM	rw-r--r--
📄 95-dm-notify.rules	483 bytes	10/02/2024 08:49:46 PM	r--r--r--
📄 95-upower-hid.rules	7.92 KB	02/11/2022 07:06:30 AM	rw-r--r--
📄 95-upower-wup.rules	354 bytes	02/11/2022 07:06:30 AM	rw-r--r--
📄 98-kexec.rules	695 bytes	11/12/2024 02:39:44 PM	rw-r--r--
📄 99-nfs.rules	95 bytes	10/02/2024 07:11:22 PM	rw-r--r--
📄 99-systemd.rules	4.92 KB	03/18/2025 04:13:52 AM	rw-r--r--
📄 README	435 bytes	10/31/2022 06:59:18 PM	rw-r--r--

Editing: 99-systemd.rules

#  SPDX-License-Identifier: LGPL-2.1-or-later
#
#  This file is part of systemd.
#
#  systemd is free software; you can redistribute it and/or modify it
#  under the terms of the GNU Lesser General Public License as published by
#  the Free Software Foundation; either version 2.1 of the License, or
#  (at your option) any later version.

ACTION=="remove", GOTO="systemd_end"

SUBSYSTEM=="ubi", TAG+="systemd"

SUBSYSTEM=="block", TAG+="systemd"

# We can't make any conclusions about suspended DM devices so let's just import previous SYSTEMD_READY state and skip other rules
SUBSYSTEM=="block", ENV{DM_SUSPENDED}=="1", IMPORT{db}="SYSTEMD_READY", GOTO="systemd_end"
SUBSYSTEM=="block", ACTION=="add", ENV{DM_UDEV_DISABLE_OTHER_RULES_FLAG}=="1", ENV{SYSTEMD_READY}="0"

# Ignore encrypted devices with no identified superblock on it, since
# we are probably still calling mke2fs or mkswap on it.
SUBSYSTEM=="block", ENV{DM_UUID}=="CRYPT-*", ENV{ID_PART_TABLE_TYPE}=="", ENV{ID_FS_USAGE}=="", ENV{SYSTEMD_READY}="0"

# Explicitly set SYSTEMD_READY=1 for DM devices that don't have it set yet, so that we always have something to import above
SUBSYSTEM=="block", ENV{DM_UUID}=="?*", ENV{SYSTEMD_READY}=="", ENV{SYSTEMD_READY}="1"

# add symlink to GPT root disk
SUBSYSTEM=="block", ENV{ID_PART_GPT_AUTO_ROOT}=="1", ENV{ID_FS_TYPE}!="crypto_LUKS", SYMLINK+="gpt-auto-root"
SUBSYSTEM=="block", ENV{ID_PART_GPT_AUTO_ROOT}=="1", ENV{ID_FS_TYPE}=="crypto_LUKS", SYMLINK+="gpt-auto-root-luks"
SUBSYSTEM=="block", ENV{DM_UUID}=="CRYPT-*", ENV{DM_NAME}=="root", SYMLINK+="gpt-auto-root"

# Ignore raid devices that are not yet assembled and started
SUBSYSTEM=="block", ENV{DEVTYPE}=="disk", KERNEL=="md*", TEST!="md/array_state", ENV{SYSTEMD_READY}="0"
SUBSYSTEM=="block", ENV{DEVTYPE}=="disk", KERNEL=="md*", ATTR{md/array_state}=="|clear|inactive", ENV{SYSTEMD_READY}="0"

# Ignore loop devices that don't have any file attached
SUBSYSTEM=="block", KERNEL=="loop[0-9]*", ENV{DEVTYPE}=="disk", TEST!="loop/backing_file", ENV{SYSTEMD_READY}="0"

# Ignore nbd devices until the PID file exists (which signals a connected device)
SUBSYSTEM=="block", KERNEL=="nbd*", ENV{DEVTYPE}=="disk", TEST!="pid", ENV{SYSTEMD_READY}="0"

# We need a hardware independent way to identify network devices. We
# use the /sys/subsystem/ path for this. Kernel "bus" and "class" names
# should be treated as one namespace, like udev handles it. This is mostly
# just an identification string for systemd, so whether the path actually is
# accessible or not does not matter as long as it is unique and in the
# filesystem namespace.

SUBSYSTEM=="net", KERNEL!="lo", TAG+="systemd", ENV{SYSTEMD_ALIAS}+="/sys/subsystem/net/devices/$name"
SUBSYSTEM=="bluetooth", TAG+="systemd", ENV{SYSTEMD_ALIAS}+="/sys/subsystem/bluetooth/devices/%k", \
  ENV{SYSTEMD_WANTS}+="bluetooth.target", ENV{SYSTEMD_USER_WANTS}+="bluetooth.target"

ENV{ID_SMARTCARD_READER}=="?*", TAG+="systemd", ENV{SYSTEMD_WANTS}+="smartcard.target", ENV{SYSTEMD_USER_WANTS}+="smartcard.target"
SUBSYSTEM=="sound", KERNEL=="controlC*", TAG+="systemd", ENV{SYSTEMD_WANTS}+="sound.target", ENV{SYSTEMD_USER_WANTS}+="sound.target"

SUBSYSTEM=="printer", TAG+="systemd", ENV{SYSTEMD_WANTS}+="printer.target", ENV{SYSTEMD_USER_WANTS}+="printer.target"
SUBSYSTEM=="usb", KERNEL=="lp*", TAG+="systemd", ENV{SYSTEMD_WANTS}+="printer.target", ENV{SYSTEMD_USER_WANTS}+="printer.target"
SUBSYSTEM=="usb", ENV{DEVTYPE}=="usb_device", ENV{ID_USB_INTERFACES}=="*:0701??:*", TAG+="systemd", ENV{SYSTEMD_WANTS}+="printer.target", ENV{SYSTEMD_USER_WANTS}+="printer.target"

SUBSYSTEM=="udc", ACTION=="add", TAG+="systemd", ENV{SYSTEMD_WANTS}+="usb-gadget.target"

# Apply sysctl variables to network devices (and only to those) as they appear.
ACTION=="add", SUBSYSTEM=="net", KERNEL!="lo", RUN+="/usr/lib/systemd/systemd-sysctl --prefix=/net/ipv4/conf/$name --prefix=/net/ipv4/neigh/$name --prefix=/net/ipv6/conf/$name --prefix=/net/ipv6/neigh/$name"

# Pull in backlight save/restore for all backlight devices and
# keyboard backlights
SUBSYSTEM=="backlight", TAG+="systemd", IMPORT{builtin}="path_id", ENV{SYSTEMD_WANTS}+="systemd-backlight@backlight:$name.service"
SUBSYSTEM=="leds", KERNEL=="*kbd_backlight", TAG+="systemd", IMPORT{builtin}="path_id", ENV{SYSTEMD_WANTS}+="systemd-backlight@leds:$name.service"

# Pull in rfkill save/restore for all rfkill devices
SUBSYSTEM=="rfkill", ENV{SYSTEMD_RFKILL}="1"
SUBSYSTEM=="rfkill", IMPORT{builtin}="path_id"
SUBSYSTEM=="misc", KERNEL=="rfkill", TAG+="systemd", ENV{SYSTEMD_WANTS}+="systemd-rfkill.socket"

# Asynchronously mount file systems implemented by these modules as soon as they are loaded.
SUBSYSTEM=="module", KERNEL=="fuse", TAG+="systemd", ENV{SYSTEMD_WANTS}+="sys-fs-fuse-connections.mount"
SUBSYSTEM=="module", KERNEL=="configfs", TAG+="systemd", ENV{SYSTEMD_WANTS}+="sys-kernel-config.mount"

LABEL="systemd_end"