aboutsummaryrefslogtreecommitdiff
path: root/docs/design/2026-08-07-podman-socket-and-camera-udev.md
diff options
context:
space:
mode:
Diffstat (limited to 'docs/design/2026-08-07-podman-socket-and-camera-udev.md')
-rw-r--r--docs/design/2026-08-07-podman-socket-and-camera-udev.md15
1 files changed, 15 insertions, 0 deletions
diff --git a/docs/design/2026-08-07-podman-socket-and-camera-udev.md b/docs/design/2026-08-07-podman-socket-and-camera-udev.md
index 7eb99e8..f9477a2 100644
--- a/docs/design/2026-08-07-podman-socket-and-camera-udev.md
+++ b/docs/design/2026-08-07-podman-socket-and-camera-udev.md
@@ -68,3 +68,18 @@ principle; it just isn't sufficient. I lost time on that, so it is recorded
rather than left to be rediscovered.
Both items are live on ratio and neither exists on velox.
+
+## Correction (winvm, 2026-08-08)
+
+The udev mechanism claim in section 2 above is wrong and stands corrected by
+the sender: `TAG+="uaccess"` does apply to raw `SUBSYSTEM=="usb"` devices
+(`70-uaccess.rules` tags them in several places). The real failure was rule
+ordering — the ACL is applied by `73-seat-late.rules:16`, and a rule file
+numbered `99-` adds the tag after that test has run. Every distro rule adding
+the tag sorts at or below 70.
+
+The `GROUP="video", MODE="0660"` grant remains the verified working fix.
+Untested hypothesis from the sender: a rule file numbered below 73 would
+likely make uaccess work on its own (a tighter grant than the group). The
+installer task ships the rule numbered below 73 with both mechanisms and
+leaves the uaccess-alone test for when the camera is attached.