Why not have it in the module which capabilities (there may be more than one) are required to load it, and avoid going through udev? Not all systems use udev...
Posted Mar 4, 2011 19:16 UTC (Fri) by misiu_mp (guest, #41936)
[Link]
How about extending this idea to all files. Define a Access requirement list for each file, or extend the ACL system with capabilities. Only processes/users with given capabilities would be able to read, write or execute the files.