From 6dcbb0360127ca2d4c43923ea2dfbc9c23196974 Mon Sep 17 00:00:00 2001
From: Raphael Dannecker <raphael.dannecker@steinbeisschule-reutlingen.de>
Date: Wed, 5 Feb 2025 13:10:56 +0100
Subject: [PATCH] Allow domain users to write sd-cards

---
 roles/lmn_fvs/tasks/main.yml | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/roles/lmn_fvs/tasks/main.yml b/roles/lmn_fvs/tasks/main.yml
index d8fda69..de8c0b7 100644
--- a/roles/lmn_fvs/tasks/main.yml
+++ b/roles/lmn_fvs/tasks/main.yml
@@ -313,5 +313,13 @@
       [init]
         defaultBranch = main
 
+- name: Adjust mmcblk-device gid to allow users to access SD-cards
+  ansible.builtin.copy:
+    dest: /etc/udev/rules.d/80-mmcblk.rules
+    mode: "0644"
+    content: |
+      KERNEL=="mmcblk[0-9]", ENV{ID_NAME}=="?*", ENV{ID_SERIAL}=="?*", GROUP="domain users"
+      KERNEL=="mmcblk[0-9]p[0-9]*", ENV{ID_NAME}=="?*", ENV{ID_SERIAL}=="?*", GROUP="domain users"
+
 - name: Include sync
   ansible.builtin.include_tasks: sync.yml