Manual Pages  — DEVFS

The following commands are recognized:

rule add [rulenum ]rulespec
	Add the rule described by rulespec (defined below) to the ruleset. The rule has the number rulenum if it is explicitly specified; otherwise, the rule number is automatically determined by the kernel.
rule apply rulenum | rulespec
	Apply rule number rulenum or the rule described by rulespec to the mount-point. Rules that are "applied" have their conditions checked against all nodes in the mount-point and the actions taken if they match.
rule applyset
	Apply all the rules in the ruleset to the mount-point (see above for the definition of "apply").
rule del rulenum
	Delete rule number rulenum from the ruleset.
rule delset
	Delete all rules from the ruleset.
rule show [rulenum]
	Display the rule number rulenum, or all the rules in the ruleset. The output lines (one line per rule) are expected to be valid rulespecs.
rule showsets
	Report the numbers of existing rulesets.
ruleset ruleset
	Set ruleset number ruleset as the current ruleset for the mount-point.

The following conditions are recognized. Conditions are ANDed together when matching a device; if OR is desired, multiple rules can be written.

path pattern
	Matches any node with a path that matches pattern, which is interpreted as a glob(3)-style pattern.
type devtype
	Matches any node that is of type devtype. Valid types are disk, mem, tape and tty.

The following actions are recognized. Although there is no explicit delimiter between conditions and actions, they may not be intermixed.

group gid
	Set the GID of the node to gid, which may be a group name (looked up in /etc/group) or number.
hide	Hide the node. Nodes may later be revived manually with mknod(8) or with the unhide action. Hiding a directory node effectively hides all of its child nodes.
include ruleset
	Apply all the rules in ruleset number ruleset to the node. This does not necessarily result in any changes to the node (e.g., if none of the rules in the included ruleset match). Include commands in the referenced ruleset are not resolved.
mode filemode
	Set the file mode to filemode, which is interpreted as in chmod(1).
user uid
	Set the UID to uid, which may be a user name (looked up in /etc/passwd) or number.
unhide
	Unhide the node. If the node resides in a subdirectory, all parent directory nodes must be visible to be able to access the node.

Ruleset number 0 is the default ruleset for all new mount-points. It is always empty, cannot be modified or deleted, and does not show up in the output of showsets.

Rules and rulesets are unique to the entire system, not a particular mount-point. I.e., a showsets will return the same information regardless of the mount-point specified with -m. The mount-point is only relevant when changing what its current ruleset is or when using one of the apply commands.