# this is a preliminary paranoid rule from a local installation. Feel free to submit
# patches that may make the rule suitable for your installation

@@define MAJMIN [[:digit:]]+:[[:digit:]]+
/dev$ d VarDirInode
/dev/(block|char|mapper|shm)$ d VarDirInode-s
!/dev/(block|char)/@@{MAJMIN}$ l
/dev/bus/usb/00[1234]$ d VarDirInode
!/dev/bus/usb/00[1234]/0[01][[:digit:]]$ c
/dev/disk/by-id$ d VarDirInode
!/dev/disk/by-id/(dm-name-[-[:alnum:]_]+)$ l 
!/dev/disk/by-id/(dm-uuid-[-[:alnum:]]+)$ l
!/dev/disk/by-label/[-[:lower:]]+$ l
!/dev/disk/by-uuid/[[:xdigit:]]{8}-([[:xdigit:]]{4}-){3}[[:xdigit:]]{12}$ l
!/dev/dm-[[:digit:]]+$ b
!/dev/mapper/[-[:alnum:]_]+$ l
!/dev/serial/by-id/usb-[-[:alnum:]_\\.]+-port0$ l
!/dev/serial/by-path/pci-0000:0000:12\\.0-usb-[[:digit:]:\\.]+-port0$ l
!/dev/serial/by-path/platform-1c1[4c]000\\.usb-usb-[-[:digit:]:\\.]+port0$ l
!/dev/shm/spice\\.[[:digit:]]+$ f
!/dev/tap[[:digit:]]+ c

!/dev/@@{HOSTNAME}/[-[:lower:][:digit:]_]+$ l
!/dev/@@{HOSTNAME}_r/[-[:lower:][:digit:]_]+$ l

