build: Install udev rule to set ownership and permissions for TPM chardevs
Currently the udev rule is installed by tpm2-abrmd, but that doesn't seem
correct since users may want to access the TPM directly without using the
user-space resource manager.
Also, conceptually it should be set by the lower layers of the stack that
access the TPM character devices.
The change in this patch was taken from the tpm2-abrmd project.
Signed-off-by: Javier Martinez Canillas <javierm@redhat.com>
diff --git a/dist/tpm-udev.rules b/dist/tpm-udev.rules
new file mode 100644
index 0000000..96d2c46
--- /dev/null
+++ b/dist/tpm-udev.rules
@@ -0,0 +1,4 @@
+# tpm devices can only be accessed by the tss user but the tss
+# group members can access tpmrm devices
+KERNEL=="tpm[0-9]*", MODE="0660", OWNER="tss"
+KERNEL=="tpmrm[0-9]*", MODE="0660", OWNER="tss", GROUP="tss"