Give access to GPS devices more or less automatically. Basic idea: 1. Add HAL database of GPS devices 2. Set up permissions so that user's processes can access those devices. (unconfined_t user :-) 3. ??? 4. Profit! How to use this: 1. Make sure there is a line "blacklist garmin-gps" in the file /etc/modprobe.d/blacklist.conf 2. Add a basic "gps" HAL device-access policy to /usr/share/PolicyKit/policy/org.freedesktop.hal.device-access.policy which grants users access to GPS devices. 3. Run software (e.g. gpsbabel) as a normal unconfined_t user. Old basic idea (discarded due to garmin-gps.ko bitrot): 1. Run gpsd as a system service as "nobody.gps" and gpsd_t. 2. Communicate with this gpsd a) via /var/run/gpsd.sock for adding/removing devices b) via TCP port 2947 for getting position fixes 3. Add database of GPS devices to HAL 4. Add policy and scripts to HAL 5. Give each GPS device file a "chcon gps_device_t", and group read/write permissions for group "gps" via scripts called by HAL.