udev: setup permissions on xen device nodes

udev/Makefile

@@ -4,6 +4,7 @@ install:
 	mkdir -p $(DESTDIR)/etc/udev/rules.d
 	cp udev-qubes-block.rules $(DESTDIR)/etc/udev/rules.d/99-qubes-block.rules
 	cp udev-qubes-usb.rules $(DESTDIR)/etc/udev/rules.d/99-qubes-usb.rules
+	cp udev-qubes-misc.rules $(DESTDIR)/etc/udev/rules.d/99-qubes-misc.rules
 
 	mkdir -p $(DESTDIR)/usr/libexec/qubes
 	cp udev-block-add-change $(DESTDIR)/usr/libexec/qubes/

udev/udev-qubes-misc.rules

@@ -0,0 +1,5 @@
+# Setup permissions to allow libvchan connections as normal user
+KERNEL=="xen/evtchn", MODE="0660", GROUP="qubes"
+KERNEL=="xen/gntdev", MODE="0660", GROUP="qubes"
+KERNEL=="xen/gntalloc", MODE="0660", GROUP="qubes"
+KERNEL=="xen/privcmd", MODE="0660", GROUP="qubes"