merge udev/, libudev/, systemd/ files in src/; move extras/ to src/

1 files changed, 2753 insertions, 0 deletions

diff --git a/src/udev-rules.c b/src/udev-rules.c
new file mode 100644
index 0000000000..7e79545124
--- /dev/null
+++ b/src/udev-rules.c
@@ -0,0 +1,2753 @@
+/*
+ * Copyright (C) 2003-2010 Kay Sievers <kay.sievers@vrfy.org>
+ * Copyright (C) 2008 Alan Jenkins <alan-jenkins@tuffmail.co.uk>
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 2 of the License, or
+ * (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program.  If not, see <http://www.gnu.org/licenses/>.
+ */
+
+#include <stddef.h>
+#include <limits.h>
+#include <stdlib.h>
+#include <stdbool.h>
+#include <string.h>
+#include <stdio.h>
+#include <fcntl.h>
+#include <ctype.h>
+#include <unistd.h>
+#include <errno.h>
+#include <dirent.h>
+#include <fnmatch.h>
+#include <time.h>
+
+#include "udev.h"
+
+#define PREALLOC_TOKEN			2048
+#define PREALLOC_STRBUF			32 * 1024
+#define PREALLOC_TRIE			256
+
+struct uid_gid {
+	unsigned int name_off;
+	union {
+		uid_t	uid;
+		gid_t	gid;
+	};
+};
+
+struct trie_node {
+	/* this node's first child */
+	unsigned int child_idx;
+	/* the next child of our parent node's child list */
+	unsigned int next_child_idx;
+	/* this node's last child (shortcut for append) */
+	unsigned int last_child_idx;
+	unsigned int value_off;
+	unsigned short value_len;
+	unsigned char key;
+};
+
+struct udev_rules {
+	struct udev *udev;
+	int resolve_names;
+
+	/* every key in the rules file becomes a token */
+	struct token *tokens;
+	unsigned int token_cur;
+	unsigned int token_max;
+
+	/* all key strings are copied to a single string buffer */
+	char *buf;
+	size_t buf_cur;
+	size_t buf_max;
+	unsigned int buf_count;
+
+	/* during rule parsing, strings are indexed to find duplicates */
+	struct trie_node *trie_nodes;
+	unsigned int trie_nodes_cur;
+	unsigned int trie_nodes_max;
+
+	/* during rule parsing, uid/gid lookup results are cached */
+	struct uid_gid *uids;
+	unsigned int uids_cur;
+	unsigned int uids_max;
+	struct uid_gid *gids;
+	unsigned int gids_cur;
+	unsigned int gids_max;
+};
+
+/* KEY=="", KEY!="", KEY+="", KEY="", KEY:="" */
+enum operation_type {
+	OP_UNSET,
+
+	OP_MATCH,
+	OP_NOMATCH,
+	OP_MATCH_MAX,
+
+	OP_ADD,
+	OP_ASSIGN,
+	OP_ASSIGN_FINAL,
+};
+
+enum string_glob_type {
+	GL_UNSET,
+	GL_PLAIN,			/* no special chars */
+	GL_GLOB,			/* shell globs ?,*,[] */
+	GL_SPLIT,			/* multi-value A|B */
+	GL_SPLIT_GLOB,			/* multi-value with glob A*|B* */
+	GL_SOMETHING,			/* commonly used "?*" */
+};
+
+enum string_subst_type {
+	SB_UNSET,
+	SB_NONE,
+	SB_FORMAT,
+	SB_SUBSYS,
+};
+
+/* tokens of a rule are sorted/handled in this order */
+enum token_type {
+	TK_UNSET,
+	TK_RULE,
+
+	TK_M_ACTION,			/* val */
+	TK_M_DEVPATH,			/* val */
+	TK_M_KERNEL,			/* val */
+	TK_M_DEVLINK,			/* val */
+	TK_M_NAME,			/* val */
+	TK_M_ENV,			/* val, attr */
+	TK_M_TAG,			/* val */
+	TK_M_SUBSYSTEM,			/* val */
+	TK_M_DRIVER,			/* val */
+	TK_M_WAITFOR,			/* val */
+	TK_M_ATTR,			/* val, attr */
+
+	TK_M_PARENTS_MIN,
+	TK_M_KERNELS,			/* val */
+	TK_M_SUBSYSTEMS,		/* val */
+	TK_M_DRIVERS,			/* val */
+	TK_M_ATTRS,			/* val, attr */
+	TK_M_TAGS,			/* val */
+	TK_M_PARENTS_MAX,
+
+	TK_M_TEST,			/* val, mode_t */
+	TK_M_EVENT_TIMEOUT,		/* int */
+	TK_M_PROGRAM,			/* val */
+	TK_M_IMPORT_FILE,		/* val */
+	TK_M_IMPORT_PROG,		/* val */
+	TK_M_IMPORT_BUILTIN,		/* val */
+	TK_M_IMPORT_DB,			/* val */
+	TK_M_IMPORT_CMDLINE,		/* val */
+	TK_M_IMPORT_PARENT,		/* val */
+	TK_M_RESULT,			/* val */
+	TK_M_MAX,
+
+	TK_A_STRING_ESCAPE_NONE,
+	TK_A_STRING_ESCAPE_REPLACE,
+	TK_A_DB_PERSIST,
+	TK_A_INOTIFY_WATCH,		/* int */
+	TK_A_DEVLINK_PRIO,		/* int */
+	TK_A_OWNER,			/* val */
+	TK_A_GROUP,			/* val */
+	TK_A_MODE,			/* val */
+	TK_A_OWNER_ID,			/* uid_t */
+	TK_A_GROUP_ID,			/* gid_t */
+	TK_A_MODE_ID,			/* mode_t */
+	TK_A_STATIC_NODE,		/* val */
+	TK_A_ENV,			/* val, attr */
+	TK_A_TAG,			/* val */
+	TK_A_NAME,			/* val */
+	TK_A_DEVLINK,			/* val */
+	TK_A_ATTR,			/* val, attr */
+	TK_A_RUN,			/* val, bool */
+	TK_A_GOTO,			/* size_t */
+
+	TK_END,
+};
+
+/* we try to pack stuff in a way that we take only 12 bytes per token */
+struct token {
+	union {
+		unsigned char type;		/* same in rule and key */
+		struct {
+			enum token_type type:8;
+			bool can_set_name:1;
+			bool has_static_node:1;
+			unsigned int unused:6;
+			unsigned short token_count;
+			unsigned int label_off;
+			unsigned short filename_off;
+			unsigned short filename_line;
+		} rule;
+		struct {
+			enum token_type type:8;
+			enum operation_type op:8;
+			enum string_glob_type glob:8;
+			enum string_subst_type subst:4;
+			enum string_subst_type attrsubst:4;
+			unsigned int value_off;
+			union {
+				unsigned int attr_off;
+				int devlink_unique;
+				unsigned int rule_goto;
+				mode_t  mode;
+				uid_t uid;
+				gid_t gid;
+				int devlink_prio;
+				int event_timeout;
+				int watch;
+				enum udev_builtin_cmd builtin_cmd;
+			};
+		} key;
+	};
+};
+
+#define MAX_TK		64
+struct rule_tmp {
+	struct udev_rules *rules;
+	struct token rule;
+	struct token token[MAX_TK];
+	unsigned int token_cur;
+};
+
+#ifdef ENABLE_DEBUG
+static const char *operation_str(enum operation_type type)
+{
+	static const char *operation_strs[] = {
+		[OP_UNSET] =		"UNSET",
+		[OP_MATCH] =		"match",
+		[OP_NOMATCH] =		"nomatch",
+		[OP_MATCH_MAX] =	"MATCH_MAX",
+
+		[OP_ADD] =		"add",
+		[OP_ASSIGN] =		"assign",
+		[OP_ASSIGN_FINAL] =	"assign-final",
+}	;
+
+	return operation_strs[type];
+}
+
+static const char *string_glob_str(enum string_glob_type type)
+{
+	static const char *string_glob_strs[] = {
+		[GL_UNSET] = 		"UNSET",
+		[GL_PLAIN] = 		"plain",
+		[GL_GLOB] = 		"glob",
+		[GL_SPLIT] = 		"split",
+		[GL_SPLIT_GLOB] = 	"split-glob",
+		[GL_SOMETHING] = 	"split-glob",
+	};
+
+	return string_glob_strs[type];
+}
+
+static const char *token_str(enum token_type type)
+{
+	static const char *token_strs[] = {
+		[TK_UNSET] =			"UNSET",
+		[TK_RULE] =			"RULE",
+
+		[TK_M_ACTION] =			"M ACTION",
+		[TK_M_DEVPATH] =		"M DEVPATH",
+		[TK_M_KERNEL] =			"M KERNEL",
+		[TK_M_DEVLINK] =		"M DEVLINK",
+		[TK_M_NAME] =			"M NAME",
+		[TK_M_ENV] =			"M ENV",
+		[TK_M_TAG] =			"M TAG",
+		[TK_M_SUBSYSTEM] =		"M SUBSYSTEM",
+		[TK_M_DRIVER] =			"M DRIVER",
+		[TK_M_WAITFOR] =		"M WAITFOR",
+		[TK_M_ATTR] =			"M ATTR",
+
+		[TK_M_PARENTS_MIN] =		"M PARENTS_MIN",
+		[TK_M_KERNELS] =		"M KERNELS",
+		[TK_M_SUBSYSTEMS] =		"M SUBSYSTEMS",
+		[TK_M_DRIVERS] =		"M DRIVERS",
+		[TK_M_ATTRS] =			"M ATTRS",
+		[TK_M_TAGS] =			"M TAGS",
+		[TK_M_PARENTS_MAX] =		"M PARENTS_MAX",
+
+		[TK_M_TEST] =			"M TEST",
+		[TK_M_EVENT_TIMEOUT] =		"M EVENT_TIMEOUT",
+		[TK_M_PROGRAM] =		"M PROGRAM",
+		[TK_M_IMPORT_FILE] =		"M IMPORT_FILE",
+		[TK_M_IMPORT_PROG] =		"M IMPORT_PROG",
+		[TK_M_IMPORT_BUILTIN] =		"M IMPORT_BUILTIN",
+		[TK_M_IMPORT_DB] =		"M IMPORT_DB",
+		[TK_M_IMPORT_CMDLINE] =		"M IMPORT_CMDLINE",
+		[TK_M_IMPORT_PARENT] =		"M IMPORT_PARENT",
+		[TK_M_RESULT] =			"M RESULT",
+		[TK_M_MAX] =			"M MAX",
+
+		[TK_A_STRING_ESCAPE_NONE] =	"A STRING_ESCAPE_NONE",
+		[TK_A_STRING_ESCAPE_REPLACE] =	"A STRING_ESCAPE_REPLACE",
+		[TK_A_DB_PERSIST] =		"A DB_PERSIST",
+		[TK_A_INOTIFY_WATCH] = 		"A INOTIFY_WATCH",
+		[TK_A_DEVLINK_PRIO] =		"A DEVLINK_PRIO",
+		[TK_A_OWNER] =			"A OWNER",
+		[TK_A_GROUP] =			"A GROUP",
+		[TK_A_MODE] =			"A MODE",
+		[TK_A_OWNER_ID] =		"A OWNER_ID",
+		[TK_A_GROUP_ID] =		"A GROUP_ID",
+		[TK_A_STATIC_NODE] =		"A STATIC_NODE",
+		[TK_A_MODE_ID] =		"A MODE_ID",
+		[TK_A_ENV] =			"A ENV",
+		[TK_A_TAG] =			"A ENV",
+		[TK_A_NAME] =			"A NAME",
+		[TK_A_DEVLINK] =		"A DEVLINK",
+		[TK_A_ATTR] =			"A ATTR",
+		[TK_A_RUN] =			"A RUN",
+		[TK_A_GOTO] =			"A GOTO",
+
+		[TK_END] =			"END",
+	};
+
+	return token_strs[type];
+}
+
+static void dump_token(struct udev_rules *rules, struct token *token)
+{
+	enum token_type type = token->type;
+	enum operation_type op = token->key.op;
+	enum string_glob_type glob = token->key.glob;
+	const char *value = &rules->buf[token->key.value_off];
+	const char *attr = &rules->buf[token->key.attr_off];
+
+	switch (type) {
+	case TK_RULE:
+		{
+			const char *tks_ptr = (char *)rules->tokens;
+			const char *tk_ptr = (char *)token;
+			unsigned int idx = (tk_ptr - tks_ptr) / sizeof(struct token);
+
+			dbg(rules->udev, "* RULE %s:%u, token: %u, count: %u, label: '%s'\n",
+			    &rules->buf[token->rule.filename_off], token->rule.filename_line,
+			    idx, token->rule.token_count,
+			    &rules->buf[token->rule.label_off]);
+			break;
+		}
+	case TK_M_ACTION:
+	case TK_M_DEVPATH:
+	case TK_M_KERNEL:
+	case TK_M_SUBSYSTEM:
+	case TK_M_DRIVER:
+	case TK_M_WAITFOR:
+	case TK_M_DEVLINK:
+	case TK_M_NAME:
+	case TK_M_KERNELS:
+	case TK_M_SUBSYSTEMS:
+	case TK_M_DRIVERS:
+	case TK_M_TAGS:
+	case TK_M_PROGRAM:
+	case TK_M_IMPORT_FILE:
+	case TK_M_IMPORT_PROG:
+	case TK_M_IMPORT_DB:
+	case TK_M_IMPORT_CMDLINE:
+	case TK_M_IMPORT_PARENT:
+	case TK_M_RESULT:
+	case TK_A_NAME:
+	case TK_A_DEVLINK:
+	case TK_A_OWNER:
+	case TK_A_GROUP:
+	case TK_A_MODE:
+	case TK_A_RUN:
+		dbg(rules->udev, "%s %s '%s'(%s)\n",
+		    token_str(type), operation_str(op), value, string_glob_str(glob));
+		break;
+	case TK_M_IMPORT_BUILTIN:
+		dbg(rules->udev, "%s %i '%s'\n", token_str(type), token->key.builtin_cmd, value);
+		break;
+	case TK_M_ATTR:
+	case TK_M_ATTRS:
+	case TK_M_ENV:
+	case TK_A_ATTR:
+	case TK_A_ENV:
+		dbg(rules->udev, "%s %s '%s' '%s'(%s)\n",
+		    token_str(type), operation_str(op), attr, value, string_glob_str(glob));
+		break;
+	case TK_M_TAG:
+	case TK_A_TAG:
+		dbg(rules->udev, "%s %s '%s'\n", token_str(type), operation_str(op), value);
+		break;
+	case TK_A_STRING_ESCAPE_NONE:
+	case TK_A_STRING_ESCAPE_REPLACE:
+	case TK_A_DB_PERSIST:
+		dbg(rules->udev, "%s\n", token_str(type));
+		break;
+	case TK_M_TEST:
+		dbg(rules->udev, "%s %s '%s'(%s) %#o\n",
+		    token_str(type), operation_str(op), value, string_glob_str(glob), token->key.mode);
+		break;
+	case TK_A_INOTIFY_WATCH:
+		dbg(rules->udev, "%s %u\n", token_str(type), token->key.watch);
+		break;
+	case TK_A_DEVLINK_PRIO:
+		dbg(rules->udev, "%s %u\n", token_str(type), token->key.devlink_prio);
+		break;
+	case TK_A_OWNER_ID:
+		dbg(rules->udev, "%s %s %u\n", token_str(type), operation_str(op), token->key.uid);
+		break;
+	case TK_A_GROUP_ID:
+		dbg(rules->udev, "%s %s %u\n", token_str(type), operation_str(op), token->key.gid);
+		break;
+	case TK_A_MODE_ID:
+		dbg(rules->udev, "%s %s %#o\n", token_str(type), operation_str(op), token->key.mode);
+		break;
+	case TK_A_STATIC_NODE:
+		dbg(rules->udev, "%s '%s'\n", token_str(type), value);
+		break;
+	case TK_M_EVENT_TIMEOUT:
+		dbg(rules->udev, "%s %u\n", token_str(type), token->key.event_timeout);
+		break;
+	case TK_A_GOTO:
+		dbg(rules->udev, "%s '%s' %u\n", token_str(type), value, token->key.rule_goto);
+		break;
+	case TK_END:
+		dbg(rules->udev, "* %s\n", token_str(type));
+		break;
+	case TK_M_PARENTS_MIN:
+	case TK_M_PARENTS_MAX:
+	case TK_M_MAX:
+	case TK_UNSET:
+		dbg(rules->udev, "unknown type %u\n", type);
+		break;
+	}
+}
+
+static void dump_rules(struct udev_rules *rules)
+{
+	unsigned int i;
+
+	dbg(rules->udev, "dumping %u (%zu bytes) tokens, %u (%zu bytes) strings\n",
+	    rules->token_cur,
+	    rules->token_cur * sizeof(struct token),
+	    rules->buf_count,
+	    rules->buf_cur);
+	for(i = 0; i < rules->token_cur; i++)
+		dump_token(rules, &rules->tokens[i]);
+}
+#else
+static inline const char *operation_str(enum operation_type type) { return NULL; }
+static inline const char *token_str(enum token_type type) { return NULL; }
+static inline void dump_token(struct udev_rules *rules, struct token *token) {}
+static inline void dump_rules(struct udev_rules *rules) {}
+#endif /* ENABLE_DEBUG */
+
+static int add_new_string(struct udev_rules *rules, const char *str, size_t bytes)
+{
+	int off;
+
+	/* grow buffer if needed */
+	if (rules->buf_cur + bytes+1 >= rules->buf_max) {
+		char *buf;
+		unsigned int add;
+
+		/* double the buffer size */
+		add = rules->buf_max;
+		if (add < bytes * 8)
+			add = bytes * 8;
+
+		buf = realloc(rules->buf, rules->buf_max + add);
+		if (buf == NULL)
+			return -1;
+		dbg(rules->udev, "extend buffer from %zu to %zu\n", rules->buf_max, rules->buf_max + add);
+		rules->buf = buf;
+		rules->buf_max += add;
+	}
+	off = rules->buf_cur;
+	memcpy(&rules->buf[rules->buf_cur], str, bytes);
+	rules->buf_cur += bytes;
+	rules->buf_count++;
+	return off;
+}
+
+static int add_string(struct udev_rules *rules, const char *str)
+{
+	unsigned int node_idx;
+	struct trie_node *new_node;
+	unsigned int new_node_idx;
+	unsigned char key;
+	unsigned short len;
+	unsigned int depth;
+	unsigned int off;
+	struct trie_node *parent;
+
+	/* walk trie, start from last character of str to find matching tails */
+	len = strlen(str);
+	key = str[len-1];
+	node_idx = 0;
+	for (depth = 0; depth <= len; depth++) {
+		struct trie_node *node;
+		unsigned int child_idx;
+
+		node = &rules->trie_nodes[node_idx];
+		off = node->value_off + node->value_len - len;
+
+		/* match against current node */
+		if (depth == len || (node->value_len >= len && memcmp(&rules->buf[off], str, len) == 0))
+			return off;
+
+		/* lookup child node */
+		key = str[len - 1 - depth];
+		child_idx = node->child_idx;
+		while (child_idx > 0) {
+			struct trie_node *child;
+
+			child = &rules->trie_nodes[child_idx];
+			if (child->key == key)
+				break;
+			child_idx = child->next_child_idx;
+		}
+		if (child_idx == 0)
+			break;
+		node_idx = child_idx;
+	}
+
+	/* string not found, add it */
+	off = add_new_string(rules, str, len + 1);
+
+	/* grow trie nodes if needed */
+	if (rules->trie_nodes_cur >= rules->trie_nodes_max) {
+		struct trie_node *nodes;
+		unsigned int add;
+
+		/* double the buffer size */
+		add = rules->trie_nodes_max;
+		if (add < 8)
+			add = 8;
+
+		nodes = realloc(rules->trie_nodes, (rules->trie_nodes_max + add) * sizeof(struct trie_node));
+		if (nodes == NULL)
+			return -1;
+		dbg(rules->udev, "extend trie nodes from %u to %u\n",
+		    rules->trie_nodes_max, rules->trie_nodes_max + add);
+		rules->trie_nodes = nodes;
+		rules->trie_nodes_max += add;
+	}
+
+	/* get a new node */
+	new_node_idx = rules->trie_nodes_cur;
+	rules->trie_nodes_cur++;
+	new_node = &rules->trie_nodes[new_node_idx];
+	memset(new_node, 0x00, sizeof(struct trie_node));
+	new_node->value_off = off;
+	new_node->value_len = len;
+	new_node->key = key;
+
+	/* join the parent's child list */
+	parent = &rules->trie_nodes[node_idx];
+	if (parent->child_idx == 0) {
+		parent->child_idx = new_node_idx;
+	} else {
+		struct trie_node *last_child;
+
+		last_child = &rules->trie_nodes[parent->last_child_idx];
+		last_child->next_child_idx = new_node_idx;
+	}
+	parent->last_child_idx = new_node_idx;
+	return off;
+}
+
+static int add_token(struct udev_rules *rules, struct token *token)
+{
+	/* grow buffer if needed */
+	if (rules->token_cur+1 >= rules->token_max) {
+		struct token *tokens;
+		unsigned int add;
+
+		/* double the buffer size */
+		add = rules->token_max;
+		if (add < 8)
+			add = 8;
+
+		tokens = realloc(rules->tokens, (rules->token_max + add ) * sizeof(struct token));
+		if (tokens == NULL)
+			return -1;
+		dbg(rules->udev, "extend tokens from %u to %u\n", rules->token_max, rules->token_max + add);
+		rules->tokens = tokens;
+		rules->token_max += add;
+	}
+	memcpy(&rules->tokens[rules->token_cur], token, sizeof(struct token));
+	rules->token_cur++;
+	return 0;
+}
+
+static uid_t add_uid(struct udev_rules *rules, const char *owner)
+{
+	unsigned int i;
+	uid_t uid;
+	unsigned int off;
+
+	/* lookup, if we know it already */
+	for (i = 0; i < rules->uids_cur; i++) {
+		off = rules->uids[i].name_off;
+		if (strcmp(&rules->buf[off], owner) == 0) {
+			uid = rules->uids[i].uid;
+			dbg(rules->udev, "return existing %u for '%s'\n", uid, owner);
+			return uid;
+		}
+	}
+	uid = util_lookup_user(rules->udev, owner);
+
+	/* grow buffer if needed */
+	if (rules->uids_cur+1 >= rules->uids_max) {
+		struct uid_gid *uids;
+		unsigned int add;
+
+		/* double the buffer size */
+		add = rules->uids_max;
+		if (add < 1)
+			add = 8;
+
+		uids = realloc(rules->uids, (rules->uids_max + add ) * sizeof(struct uid_gid));
+		if (uids == NULL)
+			return uid;
+		dbg(rules->udev, "extend uids from %u to %u\n", rules->uids_max, rules->uids_max + add);
+		rules->uids = uids;
+		rules->uids_max += add;
+	}
+	rules->uids[rules->uids_cur].uid = uid;
+	off = add_string(rules, owner);
+	if (off <= 0)
+		return uid;
+	rules->uids[rules->uids_cur].name_off = off;
+	rules->uids_cur++;
+	return uid;
+}
+
+static gid_t add_gid(struct udev_rules *rules, const char *group)
+{
+	unsigned int i;
+	gid_t gid;
+	unsigned int off;
+
+	/* lookup, if we know it already */
+	for (i = 0; i < rules->gids_cur; i++) {
+		off = rules->gids[i].name_off;
+		if (strcmp(&rules->buf[off], group) == 0) {
+			gid = rules->gids[i].gid;
+			dbg(rules->udev, "return existing %u for '%s'\n", gid, group);
+			return gid;
+		}
+	}
+	gid = util_lookup_group(rules->udev, group);
+
+	/* grow buffer if needed */
+	if (rules->gids_cur+1 >= rules->gids_max) {
+		struct uid_gid *gids;
+		unsigned int add;
+
+		/* double the buffer size */
+		add = rules->gids_max;
+		if (add < 1)
+			add = 8;
+
+		gids = realloc(rules->gids, (rules->gids_max + add ) * sizeof(struct uid_gid));
+		if (gids == NULL)
+			return gid;
+		dbg(rules->udev, "extend gids from %u to %u\n", rules->gids_max, rules->gids_max + add);
+		rules->gids = gids;
+		rules->gids_max += add;
+	}
+	rules->gids[rules->gids_cur].gid = gid;
+	off = add_string(rules, group);
+	if (off <= 0)
+		return gid;
+	rules->gids[rules->gids_cur].name_off = off;
+	rules->gids_cur++;
+	return gid;
+}
+
+static int import_property_from_string(struct udev_device *dev, char *line)
+{
+	struct udev *udev = udev_device_get_udev(dev);
+	char *key;
+	char *val;
+	size_t len;
+
+	/* find key */
+	key = line;
+	while (isspace(key[0]))
+		key++;
+
+	/* comment or empty line */
+	if (key[0] == '#' || key[0] == '\0')
+		return -1;
+
+	/* split key/value */
+	val = strchr(key, '=');
+	if (val == NULL)
+		return -1;
+	val[0] = '\0';
+	val++;
+
+	/* find value */
+	while (isspace(val[0]))
+		val++;
+
+	/* terminate key */
+	len = strlen(key);
+	if (len == 0)
+		return -1;
+	while (isspace(key[len-1]))
+		len--;
+	key[len] = '\0';
+
+	/* terminate value */
+	len = strlen(val);
+	if (len == 0)
+		return -1;
+	while (isspace(val[len-1]))
+		len--;
+	val[len] = '\0';
+
+	if (len == 0)
+		return -1;
+
+	/* unquote */
+	if (val[0] == '"' || val[0] == '\'') {
+		if (val[len-1] != val[0]) {
+			info(udev, "inconsistent quoting: '%s', skip\n", line);
+			return -1;
+		}
+		val[len-1] = '\0';
+		val++;
+	}
+
+	dbg(udev, "adding '%s'='%s'\n", key, val);
+
+	/* handle device, renamed by external tool, returning new path */
+	if (strcmp(key, "DEVPATH") == 0) {
+		char syspath[UTIL_PATH_SIZE];
+
+		info(udev, "updating devpath from '%s' to '%s'\n",
+		     udev_device_get_devpath(dev), val);
+		util_strscpyl(syspath, sizeof(syspath), udev_get_sys_path(udev), val, NULL);
+		udev_device_set_syspath(dev, syspath);
+	} else {
+		struct udev_list_entry *entry;
+
+		entry = udev_device_add_property(dev, key, val);
+		/* store in db, skip private keys */
+		if (key[0] != '.')
+			udev_list_entry_set_num(entry, true);
+	}
+	return 0;
+}
+
+static int import_file_into_properties(struct udev_device *dev, const char *filename)
+{
+	FILE *f;
+	char line[UTIL_LINE_SIZE];
+
+	f = fopen(filename, "r");
+	if (f == NULL)
+		return -1;
+	while (fgets(line, sizeof(line), f) != NULL)
+		import_property_from_string(dev, line);
+	fclose(f);
+	return 0;
+}
+
+static int import_program_into_properties(struct udev_event *event, const char *program, const sigset_t *sigmask)
+{
+	struct udev_device *dev = event->dev;
+	char **envp;
+	char result[UTIL_LINE_SIZE];
+	char *line;
+	int err;
+
+	envp = udev_device_get_properties_envp(dev);
+	err = udev_event_spawn(event, program, envp, sigmask, result, sizeof(result));
+	if (err < 0)
+		return err;
+
+	line = result;
+	while (line != NULL) {
+		char *pos;
+
+		pos = strchr(line, '\n');
+		if (pos != NULL) {
+			pos[0] = '\0';
+			pos = &pos[1];
+		}
+		import_property_from_string(dev, line);
+		line = pos;
+	}
+	return 0;
+}
+
+static int import_parent_into_properties(struct udev_device *dev, const char *filter)
+{
+	struct udev *udev = udev_device_get_udev(dev);
+	struct udev_device *dev_parent;
+	struct udev_list_entry *list_entry;
+
+	dev_parent = udev_device_get_parent(dev);
+	if (dev_parent == NULL)
+		return -1;
+
+	dbg(udev, "found parent '%s', get the node name\n", udev_device_get_syspath(dev_parent));
+	udev_list_entry_foreach(list_entry, udev_device_get_properties_list_entry(dev_parent)) {
+		const char *key = udev_list_entry_get_name(list_entry);
+		const char *val = udev_list_entry_get_value(list_entry);
+
+		if (fnmatch(filter, key, 0) == 0) {
+			struct udev_list_entry *entry;
+
+			dbg(udev, "import key '%s=%s'\n", key, val);
+			entry = udev_device_add_property(dev, key, val);
+			/* store in db, skip private keys */
+			if (key[0] != '.')
+				udev_list_entry_set_num(entry, true);
+		}
+	}
+	return 0;
+}
+
+#define WAIT_LOOP_PER_SECOND		50
+static int wait_for_file(struct udev_device *dev, const char *file, int timeout)
+{
+	struct udev *udev = udev_device_get_udev(dev);
+	char filepath[UTIL_PATH_SIZE];
+	char devicepath[UTIL_PATH_SIZE];
+	struct stat stats;
+	int loop = timeout * WAIT_LOOP_PER_SECOND;
+
+	/* a relative path is a device attribute */
+	devicepath[0] = '\0';
+	if (file[0] != '/') {
+		util_strscpyl(devicepath, sizeof(devicepath),
+			      udev_get_sys_path(udev), udev_device_get_devpath(dev), NULL);
+		util_strscpyl(filepath, sizeof(filepath), devicepath, "/", file, NULL);
+		file = filepath;
+	}
+
+	dbg(udev, "will wait %i sec for '%s'\n", timeout, file);
+	while (--loop) {
+		const struct timespec duration = { 0, 1000 * 1000 * 1000 / WAIT_LOOP_PER_SECOND };
+
+		/* lookup file */
+		if (stat(file, &stats) == 0) {
+			info(udev, "file '%s' appeared after %i loops\n", file, (timeout * WAIT_LOOP_PER_SECOND) - loop-1);
+			return 0;
+		}
+		/* make sure, the device did not disappear in the meantime */
+		if (devicepath[0] != '\0' && stat(devicepath, &stats) != 0) {
+			info(udev, "device disappeared while waiting for '%s'\n", file);
+			return -2;
+		}
+		info(udev, "wait for '%s' for %i mseconds\n", file, 1000 / WAIT_LOOP_PER_SECOND);
+		nanosleep(&duration, NULL);
+	}
+	info(udev, "waiting for '%s' failed\n", file);
+	return -1;
+}
+
+static int attr_subst_subdir(char *attr, size_t len)
+{
+	bool found = false;
+
+	if (strstr(attr, "/*/")) {
+		char *pos;
+		char dirname[UTIL_PATH_SIZE];
+		const char *tail;
+		DIR *dir;
+
+		util_strscpy(dirname, sizeof(dirname), attr);
+		pos = strstr(dirname, "/*/");
+		if (pos == NULL)
+			return -1;
+		pos[0] = '\0';
+		tail = &pos[2];
+		dir = opendir(dirname);
+		if (dir != NULL) {
+			struct dirent *dent;
+
+			for (dent = readdir(dir); dent != NULL; dent = readdir(dir)) {
+				struct stat stats;
+
+				if (dent->d_name[0] == '.')
+					continue;
+				util_strscpyl(attr, len, dirname, "/", dent->d_name, tail, NULL);
+				if (stat(attr, &stats) == 0) {
+					found = true;
+					break;
+				}
+			}
+			closedir(dir);
+		}
+	}
+
+	return found;
+}
+
+static int get_key(struct udev *udev, char **line, char **key, enum operation_type *op, char **value)
+{
+	char *linepos;
+	char *temp;
+
+	linepos = *line;
+	if (linepos == NULL || linepos[0] == '\0')
+		return -1;
+
+	/* skip whitespace */
+	while (isspace(linepos[0]) || linepos[0] == ',')
+		linepos++;
+
+	/* get the key */
+	if (linepos[0] == '\0')
+		return -1;
+	*key = linepos;
+
+	for (;;) {
+		linepos++;
+		if (linepos[0] == '\0')
+			return -1;
+		if (isspace(linepos[0]))
+			break;
+		if (linepos[0] == '=')
+			break;
+		if ((linepos[0] == '+') || (linepos[0] == '!') || (linepos[0] == ':'))
+			if (linepos[1] == '=')
+				break;
+	}
+
+	/* remember end of key */
+	temp = linepos;
+
+	/* skip whitespace after key */
+	while (isspace(linepos[0]))
+		linepos++;
+	if (linepos[0] == '\0')
+		return -1;
+
+	/* get operation type */
+	if (linepos[0] == '=' && linepos[1] == '=') {
+		*op = OP_MATCH;
+		linepos += 2;
+	} else if (linepos[0] == '!' && linepos[1] == '=') {
+		*op = OP_NOMATCH;
+		linepos += 2;
+	} else if (linepos[0] == '+' && linepos[1] == '=') {
+		*op = OP_ADD;
+		linepos += 2;
+	} else if (linepos[0] == '=') {
+		*op = OP_ASSIGN;
+		linepos++;
+	} else if (linepos[0] == ':' && linepos[1] == '=') {
+		*op = OP_ASSIGN_FINAL;
+		linepos += 2;
+	} else
+		return -1;
+
+	/* terminate key */
+	temp[0] = '\0';
+
+	/* skip whitespace after operator */
+	while (isspace(linepos[0]))
+		linepos++;
+	if (linepos[0] == '\0')
+		return -1;
+
+	/* get the value */
+	if (linepos[0] == '"')
+		linepos++;
+	else
+		return -1;
+	*value = linepos;
+
+	/* terminate */
+	temp = strchr(linepos, '"');
+	if (!temp)
+		return -1;
+	temp[0] = '\0';
+	temp++;
+	dbg(udev, "%s '%s'-'%s'\n", operation_str(*op), *key, *value);
+
+	/* move line to next key */
+	*line = temp;
+	return 0;
+}
+
+/* extract possible KEY{attr} */
+static char *get_key_attribute(struct udev *udev, char *str)
+{
+	char *pos;
+	char *attr;
+
+	attr = strchr(str, '{');
+	if (attr != NULL) {
+		attr++;
+		pos = strchr(attr, '}');
+		if (pos == NULL) {
+			err(udev, "missing closing brace for format\n");
+			return NULL;
+		}
+		pos[0] = '\0';
+		dbg(udev, "attribute='%s'\n", attr);
+		return attr;
+	}
+	return NULL;
+}
+
+static int rule_add_key(struct rule_tmp *rule_tmp, enum token_type type,
+			enum operation_type op,
+			const char *value, const void *data)
+{
+	struct token *token = &rule_tmp->token[rule_tmp->token_cur];
+	const char *attr = NULL;
+
+	memset(token, 0x00, sizeof(struct token));
+
+	switch (type) {
+	case TK_M_ACTION:
+	case TK_M_DEVPATH:
+	case TK_M_KERNEL:
+	case TK_M_SUBSYSTEM:
+	case TK_M_DRIVER:
+	case TK_M_WAITFOR:
+	case TK_M_DEVLINK:
+	case TK_M_NAME:
+	case TK_M_KERNELS:
+	case TK_M_SUBSYSTEMS:
+	case TK_M_DRIVERS:
+	case TK_M_TAGS:
+	case TK_M_PROGRAM:
+	case TK_M_IMPORT_FILE:
+	case TK_M_IMPORT_PROG:
+	case TK_M_IMPORT_DB:
+	case TK_M_IMPORT_CMDLINE:
+	case TK_M_IMPORT_PARENT:
+	case TK_M_RESULT:
+	case TK_A_OWNER:
+	case TK_A_GROUP:
+	case TK_A_MODE:
+	case TK_A_NAME:
+	case TK_A_GOTO:
+	case TK_M_TAG:
+	case TK_A_TAG:
+		token->key.value_off = add_string(rule_tmp->rules, value);
+		break;
+	case TK_M_IMPORT_BUILTIN:
+		token->key.value_off = add_string(rule_tmp->rules, value);
+		token->key.builtin_cmd = *(enum udev_builtin_cmd *)data;
+		break;
+	case TK_M_ENV:
+	case TK_M_ATTR:
+	case TK_M_ATTRS:
+	case TK_A_ATTR:
+	case TK_A_ENV:
+		attr = data;
+		token->key.value_off = add_string(rule_tmp->rules, value);
+		token->key.attr_off = add_string(rule_tmp->rules, attr);
+		break;
+	case TK_A_DEVLINK:
+		token->key.value_off = add_string(rule_tmp->rules, value);
+		token->key.devlink_unique = *(int *)data;
+		break;
+	case TK_M_TEST:
+		token->key.value_off = add_string(rule_tmp->rules, value);
+		if (data != NULL)
+			token->key.mode = *(mode_t *)data;
+		break;
+	case TK_A_STRING_ESCAPE_NONE:
+	case TK_A_STRING_ESCAPE_REPLACE:
+	case TK_A_DB_PERSIST:
+		break;
+	case TK_A_RUN:
+		token->key.value_off = add_string(rule_tmp->rules, value);
+		break;
+	case TK_A_INOTIFY_WATCH:
+	case TK_A_DEVLINK_PRIO:
+		token->key.devlink_prio = *(int *)data;
+		break;
+	case TK_A_OWNER_ID:
+		token->key.uid = *(uid_t *)data;
+		break;
+	case TK_A_GROUP_ID:
+		token->key.gid = *(gid_t *)data;
+		break;
+	case TK_A_MODE_ID:
+		token->key.mode = *(mode_t *)data;
+		break;
+	case TK_A_STATIC_NODE:
+		token->key.value_off = add_string(rule_tmp->rules, value);
+		break;
+	case TK_M_EVENT_TIMEOUT:
+		token->key.event_timeout = *(int *)data;
+		break;
+	case TK_RULE:
+	case TK_M_PARENTS_MIN:
+	case TK_M_PARENTS_MAX:
+	case TK_M_MAX:
+	case TK_END:
+	case TK_UNSET:
+		err(rule_tmp->rules->udev, "wrong type %u\n", type);
+		return -1;
+	}
+
+	if (value != NULL && type < TK_M_MAX) {
+		/* check if we need to split or call fnmatch() while matching rules */
+		enum string_glob_type glob;
+		int has_split;
+		int has_glob;
+
+		has_split = (strchr(value, '|') != NULL);
+		has_glob = (strchr(value, '*') != NULL || strchr(value, '?') != NULL || strchr(value, '[') != NULL);
+		if (has_split && has_glob) {
+			glob = GL_SPLIT_GLOB;
+		} else if (has_split) {
+			glob = GL_SPLIT;
+		} else if (has_glob) {
+			if (strcmp(value, "?*") == 0)
+				glob = GL_SOMETHING;
+			else
+				glob = GL_GLOB;
+		} else {
+			glob = GL_PLAIN;
+		}
+		token->key.glob = glob;
+	}
+
+	if (value != NULL && type > TK_M_MAX) {
+		/* check if assigned value has substitution chars */
+		if (value[0] == '[')
+			token->key.subst = SB_SUBSYS;
+		else if (strchr(value, '%') != NULL || strchr(value, '$') != NULL)
+			token->key.subst = SB_FORMAT;
+		else
+			token->key.subst = SB_NONE;
+	}
+
+	if (attr != NULL) {
+		/* check if property/attribut name has substitution chars */
+		if (attr[0] == '[')
+			token->key.attrsubst = SB_SUBSYS;
+		else if (strchr(attr, '%') != NULL || strchr(attr, '$') != NULL)
+			token->key.attrsubst = SB_FORMAT;
+		else
+			token->key.attrsubst = SB_NONE;
+	}
+
+	token->key.type = type;
+	token->key.op = op;
+	rule_tmp->token_cur++;
+	if (rule_tmp->token_cur >= ARRAY_SIZE(rule_tmp->token)) {
+		err(rule_tmp->rules->udev, "temporary rule array too small\n");
+		return -1;
+	}
+	return 0;
+}
+
+static int sort_token(struct udev_rules *rules, struct rule_tmp *rule_tmp)
+{
+	unsigned int i;
+	unsigned int start = 0;
+	unsigned int end = rule_tmp->token_cur;
+
+	for (i = 0; i < rule_tmp->token_cur; i++) {
+		enum token_type next_val = TK_UNSET;
+		unsigned int next_idx = 0;
+		unsigned int j;
+
+		/* find smallest value */
+		for (j = start; j < end; j++) {
+			if (rule_tmp->token[j].type == TK_UNSET)
+				continue;
+			if (next_val == TK_UNSET || rule_tmp->token[j].type < next_val) {
+				next_val = rule_tmp->token[j].type;
+				next_idx = j;
+			}
+		}
+
+		/* add token and mark done */
+		if (add_token(rules, &rule_tmp->token[next_idx]) != 0)
+			return -1;
+		rule_tmp->token[next_idx].type = TK_UNSET;
+
+		/* shrink range */
+		if (next_idx == start)
+			start++;
+		if (next_idx+1 == end)
+			end--;
+	}
+	return 0;
+}
+
+static int add_rule(struct udev_rules *rules, char *line,
+		    const char *filename, unsigned int filename_off, unsigned int lineno)
+{
+	char *linepos;
+	char *attr;
+	struct rule_tmp rule_tmp;
+
+	memset(&rule_tmp, 0x00, sizeof(struct rule_tmp));
+	rule_tmp.rules = rules;
+	rule_tmp.rule.type = TK_RULE;
+	rule_tmp.rule.rule.filename_off = filename_off;
+	rule_tmp.rule.rule.filename_line = lineno;
+
+	linepos = line;
+	for (;;) {
+		char *key;
+		char *value;
+		enum operation_type op;
+
+		if (get_key(rules->udev, &linepos, &key, &op, &value) != 0)
+			break;
+
+		if (strcmp(key, "ACTION") == 0) {
+			if (op > OP_MATCH_MAX) {
+				err(rules->udev, "invalid ACTION operation\n");
+				goto invalid;
+			}
+			rule_add_key(&rule_tmp, TK_M_ACTION, op, value, NULL);
+			continue;
+		}
+
+		if (strcmp(key, "DEVPATH") == 0) {
+			if (op > OP_MATCH_MAX) {
+				err(rules->udev, "invalid DEVPATH operation\n");
+				goto invalid;
+			}
+			rule_add_key(&rule_tmp, TK_M_DEVPATH, op, value, NULL);
+			continue;
+		}
+
+		if (strcmp(key, "KERNEL") == 0) {
+			if (op > OP_MATCH_MAX) {
+				err(rules->udev, "invalid KERNEL operation\n");
+				goto invalid;
+			}
+			rule_add_key(&rule_tmp, TK_M_KERNEL, op, value, NULL);
+			continue;
+		}
+
+		if (strcmp(key, "SUBSYSTEM") == 0) {
+			if (op > OP_MATCH_MAX) {
+				err(rules->udev, "invalid SUBSYSTEM operation\n");
+				goto invalid;
+			}
+			/* bus, class, subsystem events should all be the same */
+			if (strcmp(value, "subsystem") == 0 ||
+			    strcmp(value, "bus") == 0 ||
+			    strcmp(value, "class") == 0) {
+				if (strcmp(value, "bus") == 0 || strcmp(value, "class") == 0)
+					err(rules->udev, "'%s' must be specified as 'subsystem' \n"
+					    "please fix it in %s:%u", value, filename, lineno);
+				rule_add_key(&rule_tmp, TK_M_SUBSYSTEM, op, "subsystem|class|bus", NULL);
+			} else
+				rule_add_key(&rule_tmp, TK_M_SUBSYSTEM, op, value, NULL);
+			continue;
+		}
+
+		if (strcmp(key, "DRIVER") == 0) {
+			if (op > OP_MATCH_MAX) {
+				err(rules->udev, "invalid DRIVER operation\n");
+				goto invalid;
+			}
+			rule_add_key(&rule_tmp, TK_M_DRIVER, op, value, NULL);
+			continue;
+		}
+
+		if (strncmp(key, "ATTR{", sizeof("ATTR{")-1) == 0) {
+			attr = get_key_attribute(rules->udev, key + sizeof("ATTR")-1);
+			if (attr == NULL) {
+				err(rules->udev, "error parsing ATTR attribute\n");
+				goto invalid;
+			}
+			if (op < OP_MATCH_MAX) {
+				rule_add_key(&rule_tmp, TK_M_ATTR, op, value, attr);
+			} else {
+				rule_add_key(&rule_tmp, TK_A_ATTR, op, value, attr);
+			}
+			continue;
+		}
+
+		if (strcmp(key, "KERNELS") == 0) {
+			if (op > OP_MATCH_MAX) {
+				err(rules->udev, "invalid KERNELS operation\n");
+				goto invalid;
+			}
+			rule_add_key(&rule_tmp, TK_M_KERNELS, op, value, NULL);
+			continue;
+		}
+
+		if (strcmp(key, "SUBSYSTEMS") == 0) {
+			if (op > OP_MATCH_MAX) {
+				err(rules->udev, "invalid SUBSYSTEMS operation\n");
+				goto invalid;
+			}
+			rule_add_key(&rule_tmp, TK_M_SUBSYSTEMS, op, value, NULL);
+			continue;
+		}
+
+		if (strcmp(key, "DRIVERS") == 0) {
+			if (op > OP_MATCH_MAX) {
+				err(rules->udev, "invalid DRIVERS operation\n");
+				goto invalid;
+			}
+			rule_add_key(&rule_tmp, TK_M_DRIVERS, op, value, NULL);
+			continue;
+		}
+
+		if (strncmp(key, "ATTRS{", sizeof("ATTRS{")-1) == 0) {
+			if (op > OP_MATCH_MAX) {
+				err(rules->udev, "invalid ATTRS operation\n");
+				goto invalid;
+			}
+			attr = get_key_attribute(rules->udev, key + sizeof("ATTRS")-1);
+			if (attr == NULL) {
+				err(rules->udev, "error parsing ATTRS attribute\n");
+				goto invalid;
+			}
+			if (strncmp(attr, "device/", 7) == 0)
+				err(rules->udev, "the 'device' link may not be available in a future kernel, "
+				    "please fix it in %s:%u", filename, lineno);
+			else if (strstr(attr, "../") != NULL)
+				err(rules->udev, "do not reference parent sysfs directories directly, "
+				    "it may break with a future kernel, please fix it in %s:%u", filename, lineno);
+			rule_add_key(&rule_tmp, TK_M_ATTRS, op, value, attr);
+			continue;
+		}
+
+		if (strcmp(key, "TAGS") == 0) {
+			if (op > OP_MATCH_MAX) {
+				err(rules->udev, "invalid TAGS operation\n");
+				goto invalid;
+			}
+			rule_add_key(&rule_tmp, TK_M_TAGS, op, value, NULL);
+			continue;
+		}
+
+		if (strncmp(key, "ENV{", sizeof("ENV{")-1) == 0) {
+			attr = get_key_attribute(rules->udev, key + sizeof("ENV")-1);
+			if (attr == NULL) {
+				err(rules->udev, "error parsing ENV attribute\n");
+				goto invalid;
+			}
+			if (op < OP_MATCH_MAX) {
+				if (rule_add_key(&rule_tmp, TK_M_ENV, op, value, attr) != 0)
+					goto invalid;
+			} else {
+				static const char *blacklist[] = {
+					"ACTION",
+					"SUBSYSTEM",
+					"DEVTYPE",
+					"MAJOR",
+					"MINOR",
+					"DRIVER",
+					"IFINDEX",
+					"DEVNAME",
+					"DEVLINKS",
+					"DEVPATH",
+					"TAGS",
+				};
+				unsigned int i;
+
+				for (i = 0; i < ARRAY_SIZE(blacklist); i++)
+					if (strcmp(attr, blacklist[i]) == 0) {
+						err(rules->udev, "invalid ENV attribute, '%s' can not be set %s:%u\n", attr, filename, lineno);
+						continue;
+					}
+				if (rule_add_key(&rule_tmp, TK_A_ENV, op, value, attr) != 0)
+					goto invalid;
+			}
+			continue;
+		}
+
+		if (strcmp(key, "TAG") == 0) {
+			if (op < OP_MATCH_MAX)
+				rule_add_key(&rule_tmp, TK_M_TAG, op, value, NULL);
+			else
+				rule_add_key(&rule_tmp, TK_A_TAG, op, value, NULL);
+			continue;
+		}
+
+		if (strcmp(key, "PROGRAM") == 0) {
+			rule_add_key(&rule_tmp, TK_M_PROGRAM, op, value, NULL);
+			continue;
+		}
+
+		if (strcmp(key, "RESULT") == 0) {
+			if (op > OP_MATCH_MAX) {
+				err(rules->udev, "invalid RESULT operation\n");
+				goto invalid;
+			}
+			rule_add_key(&rule_tmp, TK_M_RESULT, op, value, NULL);
+			continue;
+		}
+
+		if (strncmp(key, "IMPORT", sizeof("IMPORT")-1) == 0) {
+			attr = get_key_attribute(rules->udev, key + sizeof("IMPORT")-1);
+			if (attr == NULL) {
+				err(rules->udev, "IMPORT{} type missing, ignoring IMPORT %s:%u\n", filename, lineno);
+				continue;
+			}
+			if (strstr(attr, "program")) {
+				/* find known built-in command */
+				if (value[0] != '/') {
+					enum udev_builtin_cmd cmd;
+
+					cmd = udev_builtin_lookup(value);
+					if (cmd < UDEV_BUILTIN_MAX) {
+						info(rules->udev, "IMPORT found builtin '%s', replacing %s:%u\n",
+						     value, filename, lineno);
+						rule_add_key(&rule_tmp, TK_M_IMPORT_BUILTIN, op, value, &cmd);
+						continue;
+					}
+				}
+				dbg(rules->udev, "IMPORT will be executed\n");
+				rule_add_key(&rule_tmp, TK_M_IMPORT_PROG, op, value, NULL);
+			} else if (strstr(attr, "builtin")) {
+				enum udev_builtin_cmd cmd = udev_builtin_lookup(value);
+
+				dbg(rules->udev, "IMPORT execute builtin\n");
+				if (cmd < UDEV_BUILTIN_MAX)
+					rule_add_key(&rule_tmp, TK_M_IMPORT_BUILTIN, op, value, &cmd);
+				else
+					err(rules->udev, "IMPORT{builtin}: '%s' unknown %s:%u\n", value, filename, lineno);
+			} else if (strstr(attr, "file")) {
+				dbg(rules->udev, "IMPORT will be included as file\n");
+				rule_add_key(&rule_tmp, TK_M_IMPORT_FILE, op, value, NULL);
+			} else if (strstr(attr, "db")) {
+				dbg(rules->udev, "IMPORT will include db values\n");
+				rule_add_key(&rule_tmp, TK_M_IMPORT_DB, op, value, NULL);
+			} else if (strstr(attr, "cmdline")) {
+				dbg(rules->udev, "IMPORT will include db values\n");
+				rule_add_key(&rule_tmp, TK_M_IMPORT_CMDLINE, op, value, NULL);
+			} else if (strstr(attr, "parent")) {
+				dbg(rules->udev, "IMPORT will include the parent values\n");
+				rule_add_key(&rule_tmp, TK_M_IMPORT_PARENT, op, value, NULL);
+			}
+			continue;
+		}
+
+		if (strncmp(key, "TEST", sizeof("TEST")-1) == 0) {
+			mode_t mode = 0;
+
+			if (op > OP_MATCH_MAX) {
+				err(rules->udev, "invalid TEST operation\n");
+				goto invalid;
+			}
+			attr = get_key_attribute(rules->udev, key + sizeof("TEST")-1);
+			if (attr != NULL) {
+				mode = strtol(attr, NULL, 8);
+				rule_add_key(&rule_tmp, TK_M_TEST, op, value, &mode);
+			} else {
+				rule_add_key(&rule_tmp, TK_M_TEST, op, value, NULL);
+			}
+			continue;
+		}
+
+		if (strcmp(key, "RUN") == 0) {
+			rule_add_key(&rule_tmp, TK_A_RUN, op, value, NULL);
+			continue;
+		}
+
+		if (strcmp(key, "WAIT_FOR") == 0 || strcmp(key, "WAIT_FOR_SYSFS") == 0) {
+			rule_add_key(&rule_tmp, TK_M_WAITFOR, 0, value, NULL);
+			continue;
+		}
+
+		if (strcmp(key, "LABEL") == 0) {
+			rule_tmp.rule.rule.label_off = add_string(rules, value);
+			continue;
+		}
+
+		if (strcmp(key, "GOTO") == 0) {
+			rule_add_key(&rule_tmp, TK_A_GOTO, 0, value, NULL);
+			continue;
+		}
+
+		if (strncmp(key, "NAME", sizeof("NAME")-1) == 0) {
+			if (op < OP_MATCH_MAX) {
+				rule_add_key(&rule_tmp, TK_M_NAME, op, value, NULL);
+			} else {
+				if (strcmp(value, "%k") == 0) {
+					err(rules->udev, "NAME=\"%%k\" is ignored, because it breaks kernel supplied names, "
+					    "please remove it from %s:%u\n", filename, lineno);
+					continue;
+				}
+				if (value[0] == '\0') {
+					info(rules->udev, "NAME=\"\" is ignored, because udev will not delete any device nodes, "
+					     "please remove it from %s:%u\n", filename, lineno);
+					continue;
+				}
+				rule_add_key(&rule_tmp, TK_A_NAME, op, value, NULL);
+			}
+			rule_tmp.rule.rule.can_set_name = true;
+			continue;
+		}
+
+		if (strncmp(key, "SYMLINK", sizeof("SYMLINK")-1) == 0) {
+			if (op < OP_MATCH_MAX) {
+				rule_add_key(&rule_tmp, TK_M_DEVLINK, op, value, NULL);
+			} else {
+				int flag = 0;
+
+				attr = get_key_attribute(rules->udev, key + sizeof("SYMLINK")-1);
+				if (attr != NULL && strstr(attr, "unique") != NULL)
+					flag = 1;
+				rule_add_key(&rule_tmp, TK_A_DEVLINK, op, value, &flag);
+			}
+			rule_tmp.rule.rule.can_set_name = true;
+			continue;
+		}
+
+		if (strcmp(key, "OWNER") == 0) {
+			uid_t uid;
+			char *endptr;
+
+			uid = strtoul(value, &endptr, 10);
+			if (endptr[0] == '\0') {
+				rule_add_key(&rule_tmp, TK_A_OWNER_ID, op, NULL, &uid);
+			} else if ((rules->resolve_names > 0) && strchr("$%", value[0]) == NULL) {
+				uid = add_uid(rules, value);
+				rule_add_key(&rule_tmp, TK_A_OWNER_ID, op, NULL, &uid);
+			} else if (rules->resolve_names >= 0) {
+				rule_add_key(&rule_tmp, TK_A_OWNER, op, value, NULL);
+			}
+			rule_tmp.rule.rule.can_set_name = true;
+			continue;
+		}
+
+		if (strcmp(key, "GROUP") == 0) {
+			gid_t gid;
+			char *endptr;
+
+			gid = strtoul(value, &endptr, 10);
+			if (endptr[0] == '\0') {
+				rule_add_key(&rule_tmp, TK_A_GROUP_ID, op, NULL, &gid);
+			} else if ((rules->resolve_names > 0) && strchr("$%", value[0]) == NULL) {
+				gid = add_gid(rules, value);
+				rule_add_key(&rule_tmp, TK_A_GROUP_ID, op, NULL, &gid);
+			} else if (rules->resolve_names >= 0) {
+				rule_add_key(&rule_tmp, TK_A_GROUP, op, value, NULL);
+			}
+			rule_tmp.rule.rule.can_set_name = true;
+			continue;
+		}
+
+		if (strcmp(key, "MODE") == 0) {
+			mode_t mode;
+			char *endptr;
+
+			mode = strtol(value, &endptr, 8);
+			if (endptr[0] == '\0')
+				rule_add_key(&rule_tmp, TK_A_MODE_ID, op, NULL, &mode);
+			else
+				rule_add_key(&rule_tmp, TK_A_MODE, op, value, NULL);
+			rule_tmp.rule.rule.can_set_name = true;
+			continue;
+		}
+
+		if (strcmp(key, "OPTIONS") == 0) {
+			const char *pos;
+
+			pos = strstr(value, "link_priority=");
+			if (pos != NULL) {
+				int prio = atoi(&pos[strlen("link_priority=")]);
+
+				rule_add_key(&rule_tmp, TK_A_DEVLINK_PRIO, op, NULL, &prio);
+				dbg(rules->udev, "link priority=%i\n", prio);
+			}
+
+			pos = strstr(value, "event_timeout=");
+			if (pos != NULL) {
+				int tout = atoi(&pos[strlen("event_timeout=")]);
+
+				rule_add_key(&rule_tmp, TK_M_EVENT_TIMEOUT, op, NULL, &tout);
+				dbg(rules->udev, "event timeout=%i\n", tout);
+			}
+
+			pos = strstr(value, "string_escape=");
+			if (pos != NULL) {
+				pos = &pos[strlen("string_escape=")];
+				if (strncmp(pos, "none", strlen("none")) == 0)
+					rule_add_key(&rule_tmp, TK_A_STRING_ESCAPE_NONE, op, NULL, NULL);
+				else if (strncmp(pos, "replace", strlen("replace")) == 0)
+					rule_add_key(&rule_tmp, TK_A_STRING_ESCAPE_REPLACE, op, NULL, NULL);
+			}
+
+			pos = strstr(value, "db_persist");
+			if (pos != NULL)
+				rule_add_key(&rule_tmp, TK_A_DB_PERSIST, op, NULL, NULL);
+
+			pos = strstr(value, "nowatch");
+			if (pos != NULL) {
+				const int off = 0;
+
+				rule_add_key(&rule_tmp, TK_A_INOTIFY_WATCH, op, NULL, &off);
+				dbg(rules->udev, "inotify watch of device disabled\n");
+			} else {
+				pos = strstr(value, "watch");
+				if (pos != NULL) {
+					const int on = 1;
+
+					rule_add_key(&rule_tmp, TK_A_INOTIFY_WATCH, op, NULL, &on);
+					dbg(rules->udev, "inotify watch of device requested\n");
+				}
+			}
+
+			pos = strstr(value, "static_node=");
+			if (pos != NULL) {
+				rule_add_key(&rule_tmp, TK_A_STATIC_NODE, op, &pos[strlen("static_node=")], NULL);
+				rule_tmp.rule.rule.has_static_node = true;
+			}
+
+			continue;
+		}
+
+		err(rules->udev, "unknown key '%s' in %s:%u\n", key, filename, lineno);
+		goto invalid;
+	}
+
+	/* add rule token */
+	rule_tmp.rule.rule.token_count = 1 + rule_tmp.token_cur;
+	if (add_token(rules, &rule_tmp.rule) != 0)
+		goto invalid;
+
+	/* add tokens to list, sorted by type */
+	if (sort_token(rules, &rule_tmp) != 0)
+		goto invalid;
+
+	return 0;
+invalid:
+	err(rules->udev, "invalid rule '%s:%u'\n", filename, lineno);
+	return -1;
+}
+
+static int parse_file(struct udev_rules *rules, const char *filename, unsigned short filename_off)
+{
+	FILE *f;
+	unsigned int first_token;
+	char line[UTIL_LINE_SIZE];
+	int line_nr = 0;
+	unsigned int i;
+
+	info(rules->udev, "reading '%s' as rules file\n", filename);
+
+	f = fopen(filename, "r");
+	if (f == NULL)
+		return -1;
+
+	first_token = rules->token_cur;
+
+	while (fgets(line, sizeof(line), f) != NULL) {
+		char *key;
+		size_t len;
+
+		/* skip whitespace */
+		line_nr++;
+		key = line;
+		while (isspace(key[0]))
+			key++;
+
+		/* comment */
+		if (key[0] == '#')
+			continue;
+
+		len = strlen(line);
+		if (len < 3)
+			continue;
+
+		/* continue reading if backslash+newline is found */
+		while (line[len-2] == '\\') {
+			if (fgets(&line[len-2], (sizeof(line)-len)+2, f) == NULL)
+				break;
+			if (strlen(&line[len-2]) < 2)
+				break;
+			line_nr++;
+			len = strlen(line);
+		}
+
+		if (len+1 >= sizeof(line)) {
+			err(rules->udev, "line too long '%s':%u, ignored\n", filename, line_nr);
+			continue;
+		}
+		add_rule(rules, key, filename, filename_off, line_nr);
+	}
+	fclose(f);
+
+	/* link GOTOs to LABEL rules in this file to be able to fast-forward */
+	for (i = first_token+1; i < rules->token_cur; i++) {
+		if (rules->tokens[i].type == TK_A_GOTO) {
+			char *label = &rules->buf[rules->tokens[i].key.value_off];
+			unsigned int j;
+
+			for (j = i+1; j < rules->token_cur; j++) {
+				if (rules->tokens[j].type != TK_RULE)
+					continue;
+				if (rules->tokens[j].rule.label_off == 0)
+					continue;
+				if (strcmp(label, &rules->buf[rules->tokens[j].rule.label_off]) != 0)
+					continue;
+				rules->tokens[i].key.rule_goto = j;
+				break;
+			}
+			if (rules->tokens[i].key.rule_goto == 0)
+				err(rules->udev, "GOTO '%s' has no matching label in: '%s'\n", label, filename);
+		}
+	}
+	return 0;
+}
+
+static int add_matching_files(struct udev *udev, struct udev_list *file_list, const char *dirname, const char *suffix)
+{
+	DIR *dir;
+	struct dirent *dent;
+	char filename[UTIL_PATH_SIZE];
+
+	dbg(udev, "open directory '%s'\n", dirname);
+	dir = opendir(dirname);
+	if (dir == NULL) {
+		info(udev, "unable to open '%s': %m\n", dirname);
+		return -1;
+	}
+
+	for (dent = readdir(dir); dent != NULL; dent = readdir(dir)) {
+		if (dent->d_name[0] == '.')
+			continue;
+
+		/* look for file matching with specified suffix */
+		if (suffix != NULL) {
+			const char *ext;
+
+			ext = strrchr(dent->d_name, '.');
+			if (ext == NULL)
+				continue;
+			if (strcmp(ext, suffix) != 0)
+				continue;
+		}
+		util_strscpyl(filename, sizeof(filename), dirname, "/", dent->d_name, NULL);
+		dbg(udev, "put file '%s' into list\n", filename);
+		/*
+		 * the basename is the key, the filename the value
+		 * identical basenames from different directories overwrite each other
+		 * entries are sorted after basename
+		 */
+		udev_list_entry_add(file_list, dent->d_name, filename);
+	}
+
+	closedir(dir);
+	return 0;
+}
+
+struct udev_rules *udev_rules_new(struct udev *udev, int resolve_names)
+{
+	struct udev_rules *rules;
+	struct udev_list file_list;
+	struct udev_list_entry *file_loop;
+	struct token end_token;
+	char **s;
+
+	rules = calloc(1, sizeof(struct udev_rules));
+	if (rules == NULL)
+		return NULL;
+	rules->udev = udev;
+	rules->resolve_names = resolve_names;
+	udev_list_init(udev, &file_list, true);
+
+	/* init token array and string buffer */
+	rules->tokens = malloc(PREALLOC_TOKEN * sizeof(struct token));
+	if (rules->tokens == NULL) {
+		free(rules);
+		return NULL;
+	}
+	rules->token_max = PREALLOC_TOKEN;
+
+	rules->buf = malloc(PREALLOC_STRBUF);
+	if (rules->buf == NULL) {
+		free(rules->tokens);
+		free(rules);
+		return NULL;
+	}
+	rules->buf_max = PREALLOC_STRBUF;
+	/* offset 0 is always '\0' */
+	rules->buf[0] = '\0';
+	rules->buf_cur = 1;
+	dbg(udev, "prealloc %zu bytes tokens (%u * %zu bytes), %zu bytes buffer\n",
+	    rules->token_max * sizeof(struct token), rules->token_max, sizeof(struct token), rules->buf_max);
+
+	rules->trie_nodes = malloc(PREALLOC_TRIE * sizeof(struct trie_node));
+	if (rules->trie_nodes == NULL) {
+		free(rules->buf);
+		free(rules->tokens);
+		free(rules);
+		return NULL;
+	}
+	rules->trie_nodes_max = PREALLOC_TRIE;
+	/* offset 0 is the trie root, with an empty string */
+	memset(rules->trie_nodes, 0x00, sizeof(struct trie_node));
+	rules->trie_nodes_cur = 1;
+
+	for (udev_get_rules_path(udev, &s, NULL); *s != NULL; s++)
+		add_matching_files(udev, &file_list, *s, ".rules");
+
+	/* add all filenames to the string buffer */
+	udev_list_entry_foreach(file_loop, udev_list_get_entry(&file_list)) {
+		const char *filename = udev_list_entry_get_value(file_loop);
+		unsigned int filename_off;
+
+		filename_off = add_string(rules, filename);
+		/* the offset in the rule is limited to unsigned short */
+		if (filename_off < USHRT_MAX)
+			udev_list_entry_set_num(file_loop, filename_off);
+	}
+
+	/* parse all rules files */
+	udev_list_entry_foreach(file_loop, udev_list_get_entry(&file_list)) {
+		const char *filename = udev_list_entry_get_value(file_loop);
+		unsigned int filename_off = udev_list_entry_get_num(file_loop);
+		struct stat st;
+
+		if (stat(filename, &st) != 0) {
+			err(udev, "can not find '%s': %m\n", filename);
+			continue;
+		}
+		if (S_ISREG(st.st_mode) && st.st_size <= 0) {
+			info(udev, "ignore empty '%s'\n", filename);
+			continue;
+		}
+		if (S_ISCHR(st.st_mode)) {
+			info(udev, "ignore masked '%s'\n", filename);
+			continue;
+		}
+		parse_file(rules, filename, filename_off);
+	}
+	udev_list_cleanup(&file_list);
+
+	memset(&end_token, 0x00, sizeof(struct token));
+	end_token.type = TK_END;
+	add_token(rules, &end_token);
+
+	/* shrink allocated token and string buffer */
+	if (rules->token_cur < rules->token_max) {
+		struct token *tokens;
+
+		tokens = realloc(rules->tokens, rules->token_cur * sizeof(struct token));
+		if (tokens != NULL || rules->token_cur == 0) {
+			rules->tokens = tokens;
+			rules->token_max = rules->token_cur;
+		}
+	}
+	if (rules->buf_cur < rules->buf_max) {
+		char *buf;
+
+		buf = realloc(rules->buf, rules->buf_cur);
+		if (buf != NULL || rules->buf_cur == 0) {
+			rules->buf = buf;
+			rules->buf_max = rules->buf_cur;
+		}
+	}
+	info(udev, "rules use %zu bytes tokens (%u * %zu bytes), %zu bytes buffer\n",
+	     rules->token_max * sizeof(struct token), rules->token_max, sizeof(struct token), rules->buf_max);
+	info(udev, "temporary index used %zu bytes (%u * %zu bytes)\n",
+	     rules->trie_nodes_cur * sizeof(struct trie_node),
+	     rules->trie_nodes_cur, sizeof(struct trie_node));
+
+	/* cleanup trie */
+	free(rules->trie_nodes);
+	rules->trie_nodes = NULL;
+	rules->trie_nodes_cur = 0;
+	rules->trie_nodes_max = 0;
+
+	/* cleanup uid/gid cache */
+	free(rules->uids);
+	rules->uids = NULL;
+	rules->uids_cur = 0;
+	rules->uids_max = 0;
+	free(rules->gids);
+	rules->gids = NULL;
+	rules->gids_cur = 0;
+	rules->gids_max = 0;
+
+	dump_rules(rules);
+	return rules;
+}
+
+struct udev_rules *udev_rules_unref(struct udev_rules *rules)
+{
+	if (rules == NULL)
+		return NULL;
+	free(rules->tokens);
+	free(rules->buf);
+	free(rules->trie_nodes);
+	free(rules->uids);
+	free(rules->gids);
+	free(rules);
+	return NULL;
+}
+
+static int match_key(struct udev_rules *rules, struct token *token, const char *val)
+{
+	char *key_value = &rules->buf[token->key.value_off];
+	char *pos;
+	bool match = false;
+
+	if (val == NULL)
+		val = "";
+
+	switch (token->key.glob) {
+	case GL_PLAIN:
+		match = (strcmp(key_value, val) == 0);
+		break;
+	case GL_GLOB:
+		match = (fnmatch(key_value, val, 0) == 0);
+		break;
+	case GL_SPLIT:
+		{
+			const char *split;
+			size_t len;
+
+			split = &rules->buf[token->key.value_off];
+			len = strlen(val);
+			for (;;) {
+				const char *next;
+
+				next = strchr(split, '|');
+				if (next != NULL) {
+					size_t matchlen = (size_t)(next - split);
+
+					match = (matchlen == len && strncmp(split, val, matchlen) == 0);
+					if (match)
+						break;
+				} else {
+					match = (strcmp(split, val) == 0);
+					break;
+				}
+				split = &next[1];
+			}
+			break;
+		}
+	case GL_SPLIT_GLOB:
+		{
+			char value[UTIL_PATH_SIZE];
+
+			util_strscpy(value, sizeof(value), &rules->buf[token->key.value_off]);
+			key_value = value;
+			while (key_value != NULL) {
+				pos = strchr(key_value, '|');
+				if (pos != NULL) {
+					pos[0] = '\0';
+					pos = &pos[1];
+				}
+				dbg(rules->udev, "match %s '%s' <-> '%s'\n", token_str(token->type), key_value, val);
+				match = (fnmatch(key_value, val, 0) == 0);
+				if (match)
+					break;
+				key_value = pos;
+			}
+			break;
+		}
+	case GL_SOMETHING:
+		match = (val[0] != '\0');
+		break;
+	case GL_UNSET:
+		return -1;
+	}
+
+	if (match && (token->key.op == OP_MATCH)) {
+		dbg(rules->udev, "%s is true (matching value)\n", token_str(token->type));
+		return 0;
+	}
+	if (!match && (token->key.op == OP_NOMATCH)) {
+		dbg(rules->udev, "%s is true (non-matching value)\n", token_str(token->type));
+		return 0;
+	}
+	dbg(rules->udev, "%s is not true\n", token_str(token->type));
+	return -1;
+}
+
+static int match_attr(struct udev_rules *rules, struct udev_device *dev, struct udev_event *event, struct token *cur)
+{
+	const char *name;
+	char nbuf[UTIL_NAME_SIZE];
+	const char *value;
+	char vbuf[UTIL_NAME_SIZE];
+	size_t len;
+
+	name = &rules->buf[cur->key.attr_off];
+	switch (cur->key.attrsubst) {
+	case SB_FORMAT:
+		udev_event_apply_format(event, name, nbuf, sizeof(nbuf));
+		name = nbuf;
+		/* fall through */
+	case SB_NONE:
+		value = udev_device_get_sysattr_value(dev, name);
+		if (value == NULL)
+			return -1;
+		break;
+	case SB_SUBSYS:
+		if (util_resolve_subsys_kernel(event->udev, name, vbuf, sizeof(vbuf), 1) != 0)
+			return -1;
+		value = vbuf;
+		break;
+	default:
+		return -1;
+	}
+
+	/* remove trailing whitespace, if not asked to match for it */
+	len = strlen(value);
+	if (len > 0 && isspace(value[len-1])) {
+		const char *key_value;
+		size_t klen;
+
+		key_value = &rules->buf[cur->key.value_off];
+		klen = strlen(key_value);
+		if (klen > 0 && !isspace(key_value[klen-1])) {
+			if (value != vbuf) {
+				util_strscpy(vbuf, sizeof(vbuf), value);
+				value = vbuf;
+			}
+			while (len > 0 && isspace(vbuf[--len]))
+				vbuf[len] = '\0';
+			dbg(rules->udev, "removed trailing whitespace from '%s'\n", value);
+		}
+	}
+
+	return match_key(rules, cur, value);
+}
+
+enum escape_type {
+	ESCAPE_UNSET,
+	ESCAPE_NONE,
+	ESCAPE_REPLACE,
+};
+
+int udev_rules_apply_to_event(struct udev_rules *rules, struct udev_event *event, const sigset_t *sigmask)
+{
+	struct token *cur;
+	struct token *rule;
+	enum escape_type esc = ESCAPE_UNSET;
+	bool can_set_name;
+
+	if (rules->tokens == NULL)
+		return -1;
+
+	can_set_name = ((strcmp(udev_device_get_action(event->dev), "remove") != 0) &&
+			(major(udev_device_get_devnum(event->dev)) > 0 ||
+			 udev_device_get_ifindex(event->dev) > 0));
+
+	/* loop through token list, match, run actions or forward to next rule */
+	cur = &rules->tokens[0];
+	rule = cur;
+	for (;;) {
+		dump_token(rules, cur);
+		switch (cur->type) {
+		case TK_RULE:
+			/* current rule */
+			rule = cur;
+			/* possibly skip rules which want to set NAME, SYMLINK, OWNER, GROUP, MODE */
+			if (!can_set_name && rule->rule.can_set_name)
+				goto nomatch;
+			esc = ESCAPE_UNSET;
+			break;
+		case TK_M_ACTION:
+			if (match_key(rules, cur, udev_device_get_action(event->dev)) != 0)
+				goto nomatch;
+			break;
+		case TK_M_DEVPATH:
+			if (match_key(rules, cur, udev_device_get_devpath(event->dev)) != 0)
+				goto nomatch;
+			break;
+		case TK_M_KERNEL:
+			if (match_key(rules, cur, udev_device_get_sysname(event->dev)) != 0)
+				goto nomatch;
+			break;
+		case TK_M_DEVLINK: {
+			size_t devlen = strlen(udev_get_dev_path(event->udev))+1;
+			struct udev_list_entry *list_entry;
+			bool match = false;
+
+			udev_list_entry_foreach(list_entry, udev_device_get_devlinks_list_entry(event->dev)) {
+				const char *devlink;
+
+				devlink =  &udev_list_entry_get_name(list_entry)[devlen];
+				if (match_key(rules, cur, devlink) == 0) {
+					match = true;
+					break;
+				}
+			}
+			if (!match)
+				goto nomatch;
+			break;
+		}
+		case TK_M_NAME:
+			if (match_key(rules, cur, event->name) != 0)
+				goto nomatch;
+			break;
+		case TK_M_ENV: {
+			const char *key_name = &rules->buf[cur->key.attr_off];
+			const char *value;
+
+			value = udev_device_get_property_value(event->dev, key_name);
+			if (value == NULL) {
+				dbg(event->udev, "ENV{%s} is not set, treat as empty\n", key_name);
+				value = "";
+			}
+			if (match_key(rules, cur, value))
+				goto nomatch;
+			break;
+		}
+		case TK_M_TAG: {
+			struct udev_list_entry *list_entry;
+			bool match = false;
+
+			udev_list_entry_foreach(list_entry, udev_device_get_tags_list_entry(event->dev)) {
+				if (strcmp(&rules->buf[cur->key.value_off], udev_list_entry_get_name(list_entry)) == 0) {
+					match = true;
+					break;
+				}
+			}
+			if (!match && (cur->key.op != OP_NOMATCH))
+				goto nomatch;
+			break;
+		}
+		case TK_M_SUBSYSTEM:
+			if (match_key(rules, cur, udev_device_get_subsystem(event->dev)) != 0)
+				goto nomatch;
+			break;
+		case TK_M_DRIVER:
+			if (match_key(rules, cur, udev_device_get_driver(event->dev)) != 0)
+				goto nomatch;
+			break;
+		case TK_M_WAITFOR: {
+			char filename[UTIL_PATH_SIZE];
+			int found;
+
+			udev_event_apply_format(event, &rules->buf[cur->key.value_off], filename, sizeof(filename));
+			found = (wait_for_file(event->dev, filename, 10) == 0);
+			if (!found && (cur->key.op != OP_NOMATCH))
+				goto nomatch;
+			break;
+		}
+		case TK_M_ATTR:
+			if (match_attr(rules, event->dev, event, cur) != 0)
+				goto nomatch;
+			break;
+		case TK_M_KERNELS:
+		case TK_M_SUBSYSTEMS:
+		case TK_M_DRIVERS:
+		case TK_M_ATTRS:
+		case TK_M_TAGS: {
+			struct token *next;
+
+			/* get whole sequence of parent matches */
+			next = cur;
+			while (next->type > TK_M_PARENTS_MIN && next->type < TK_M_PARENTS_MAX)
+				next++;
+
+			/* loop over parents */
+			event->dev_parent = event->dev;
+			for (;;) {
+				struct token *key;
+
+				dbg(event->udev, "parent: '%s'\n", udev_device_get_syspath(event->dev_parent));
+				/* loop over sequence of parent match keys */
+				for (key = cur; key < next; key++ ) {
+					dump_token(rules, key);
+					switch(key->type) {
+					case TK_M_KERNELS:
+						if (match_key(rules, key, udev_device_get_sysname(event->dev_parent)) != 0)
+							goto try_parent;
+						break;
+					case TK_M_SUBSYSTEMS:
+						if (match_key(rules, key, udev_device_get_subsystem(event->dev_parent)) != 0)
+							goto try_parent;
+						break;
+					case TK_M_DRIVERS:
+						if (match_key(rules, key, udev_device_get_driver(event->dev_parent)) != 0)
+							goto try_parent;
+						break;
+					case TK_M_ATTRS:
+						if (match_attr(rules, event->dev_parent, event, key) != 0)
+							goto try_parent;
+						break;
+					case TK_M_TAGS: {
+						bool match = udev_device_has_tag(event->dev_parent, &rules->buf[cur->key.value_off]);
+
+						if (match && key->key.op == OP_NOMATCH)
+							goto try_parent;
+						if (!match && key->key.op == OP_MATCH)
+							goto try_parent;
+						break;
+					}
+					default:
+						goto nomatch;
+					}
+					dbg(event->udev, "parent key matched\n");
+				}
+				dbg(event->udev, "all parent keys matched\n");
+				break;
+
+			try_parent:
+				event->dev_parent = udev_device_get_parent(event->dev_parent);
+				if (event->dev_parent == NULL)
+					goto nomatch;
+			}
+			/* move behind our sequence of parent match keys */
+			cur = next;
+			continue;
+		}
+		case TK_M_TEST: {
+			char filename[UTIL_PATH_SIZE];
+			struct stat statbuf;
+			int match;
+
+			udev_event_apply_format(event, &rules->buf[cur->key.value_off], filename, sizeof(filename));
+			if (util_resolve_subsys_kernel(event->udev, filename, filename, sizeof(filename), 0) != 0) {
+				if (filename[0] != '/') {
+					char tmp[UTIL_PATH_SIZE];
+
+					util_strscpy(tmp, sizeof(tmp), filename);
+					util_strscpyl(filename, sizeof(filename),
+						      udev_device_get_syspath(event->dev), "/", tmp, NULL);
+				}
+			}
+			attr_subst_subdir(filename, sizeof(filename));
+
+			match = (stat(filename, &statbuf) == 0);
+			dbg(event->udev, "'%s' %s", filename, match ? "exists\n" : "does not exist\n");
+			if (match && cur->key.mode > 0) {
+				match = ((statbuf.st_mode & cur->key.mode) > 0);
+				dbg(event->udev, "'%s' has mode=%#o and %s %#o\n", filename, statbuf.st_mode,
+				    match ? "matches" : "does not match", cur->key.mode);
+			}
+			if (match && cur->key.op == OP_NOMATCH)
+				goto nomatch;
+			if (!match && cur->key.op == OP_MATCH)
+				goto nomatch;
+			break;
+		}
+		case TK_M_EVENT_TIMEOUT:
+			info(event->udev, "OPTIONS event_timeout=%u\n", cur->key.event_timeout);
+			event->timeout_usec = cur->key.event_timeout * 1000 * 1000;
+			break;
+		case TK_M_PROGRAM: {
+			char program[UTIL_PATH_SIZE];
+			char **envp;
+			char result[UTIL_PATH_SIZE];
+
+			free(event->program_result);
+			event->program_result = NULL;
+			udev_event_apply_format(event, &rules->buf[cur->key.value_off], program, sizeof(program));
+			envp = udev_device_get_properties_envp(event->dev);
+			info(event->udev, "PROGRAM '%s' %s:%u\n",
+			     program,
+			     &rules->buf[rule->rule.filename_off],
+			     rule->rule.filename_line);
+
+			if (udev_event_spawn(event, program, envp, sigmask, result, sizeof(result)) < 0) {
+				if (cur->key.op != OP_NOMATCH)
+					goto nomatch;
+			} else {
+				int count;
+
+				util_remove_trailing_chars(result, '\n');
+				if (esc == ESCAPE_UNSET || esc == ESCAPE_REPLACE) {
+					count = util_replace_chars(result, UDEV_ALLOWED_CHARS_INPUT);
+					if (count > 0)
+						info(event->udev, "%i character(s) replaced\n" , count);
+				}
+				event->program_result = strdup(result);
+				dbg(event->udev, "storing result '%s'\n", event->program_result);
+				if (cur->key.op == OP_NOMATCH)
+					goto nomatch;
+			}
+			break;
+		}
+		case TK_M_IMPORT_FILE: {
+			char import[UTIL_PATH_SIZE];
+
+			udev_event_apply_format(event, &rules->buf[cur->key.value_off], import, sizeof(import));
+			if (import_file_into_properties(event->dev, import) != 0)
+				if (cur->key.op != OP_NOMATCH)
+					goto nomatch;
+			break;
+		}
+		case TK_M_IMPORT_PROG: {
+			char import[UTIL_PATH_SIZE];
+
+			udev_event_apply_format(event, &rules->buf[cur->key.value_off], import, sizeof(import));
+			info(event->udev, "IMPORT '%s' %s:%u\n",
+			     import,
+			     &rules->buf[rule->rule.filename_off],
+			     rule->rule.filename_line);
+
+			if (import_program_into_properties(event, import, sigmask) != 0)
+				if (cur->key.op != OP_NOMATCH)
+					goto nomatch;
+			break;
+		}
+		case TK_M_IMPORT_BUILTIN: {
+			char command[UTIL_PATH_SIZE];
+
+			if (udev_builtin_run_once(cur->key.builtin_cmd)) {
+				/* check if we ran already */
+				if (event->builtin_run & (1 << cur->key.builtin_cmd)) {
+					info(event->udev, "IMPORT builtin skip '%s' %s:%u\n",
+					     udev_builtin_name(cur->key.builtin_cmd),
+					     &rules->buf[rule->rule.filename_off],
+					     rule->rule.filename_line);
+					/* return the result from earlier run */
+					if (event->builtin_ret & (1 << cur->key.builtin_cmd))
+					if (cur->key.op != OP_NOMATCH)
+							goto nomatch;
+					break;
+				}
+				/* mark as ran */
+				event->builtin_run |= (1 << cur->key.builtin_cmd);
+			}
+
+			udev_event_apply_format(event, &rules->buf[cur->key.value_off], command, sizeof(command));
+			info(event->udev, "IMPORT builtin '%s' %s:%u\n",
+			     udev_builtin_name(cur->key.builtin_cmd),
+			     &rules->buf[rule->rule.filename_off],
+			     rule->rule.filename_line);
+
+			if (udev_builtin_run(event->dev, cur->key.builtin_cmd, command, false) != 0) {
+				/* remember failure */
+				info(rules->udev, "IMPORT builtin '%s' returned non-zero\n",
+				     udev_builtin_name(cur->key.builtin_cmd));
+				event->builtin_ret |= (1 << cur->key.builtin_cmd);
+				if (cur->key.op != OP_NOMATCH)
+					goto nomatch;
+			}
+			break;
+		}
+		case TK_M_IMPORT_DB: {
+			const char *key = &rules->buf[cur->key.value_off];
+			const char *value;
+
+			value = udev_device_get_property_value(event->dev_db, key);
+			if (value != NULL) {
+				struct udev_list_entry *entry;
+
+				entry = udev_device_add_property(event->dev, key, value);
+				udev_list_entry_set_num(entry, true);
+			} else {
+				if (cur->key.op != OP_NOMATCH)
+					goto nomatch;
+			}
+			break;
+		}
+		case TK_M_IMPORT_CMDLINE: {
+			FILE *f;
+			bool imported = false;
+
+			f = fopen("/proc/cmdline", "r");
+			if (f != NULL) {
+				char cmdline[4096];
+
+				if (fgets(cmdline, sizeof(cmdline), f) != NULL) {
+					const char *key = &rules->buf[cur->key.value_off];
+					char *pos;
+
+					pos = strstr(cmdline, key);
+					if (pos != NULL) {
+						struct udev_list_entry *entry;
+
+						pos += strlen(key);
+						if (pos[0] == '\0' || isspace(pos[0])) {
+							/* we import simple flags as 'FLAG=1' */
+							entry = udev_device_add_property(event->dev, key, "1");
+							udev_list_entry_set_num(entry, true);
+							imported = true;
+						} else if (pos[0] == '=') {
+							const char *value;
+
+							pos++;
+							value = pos;
+							while (pos[0] != '\0' && !isspace(pos[0]))
+								pos++;
+							pos[0] = '\0';
+							entry = udev_device_add_property(event->dev, key, value);
+							udev_list_entry_set_num(entry, true);
+							imported = true;
+						}
+					}
+				}
+				fclose(f);
+			}
+			if (!imported && cur->key.op != OP_NOMATCH)
+				goto nomatch;
+			break;
+		}
+		case TK_M_IMPORT_PARENT: {
+			char import[UTIL_PATH_SIZE];
+
+			udev_event_apply_format(event, &rules->buf[cur->key.value_off], import, sizeof(import));
+			if (import_parent_into_properties(event->dev, import) != 0)
+				if (cur->key.op != OP_NOMATCH)
+					goto nomatch;
+			break;
+		}
+		case TK_M_RESULT:
+			if (match_key(rules, cur, event->program_result) != 0)
+				goto nomatch;
+			break;
+		case TK_A_STRING_ESCAPE_NONE:
+			esc = ESCAPE_NONE;
+			break;
+		case TK_A_STRING_ESCAPE_REPLACE:
+			esc = ESCAPE_REPLACE;
+			break;
+		case TK_A_DB_PERSIST:
+			udev_device_set_db_persist(event->dev);
+			break;
+		case TK_A_INOTIFY_WATCH:
+			if (event->inotify_watch_final)
+				break;
+			if (cur->key.op == OP_ASSIGN_FINAL)
+				event->inotify_watch_final = true;
+			event->inotify_watch = cur->key.watch;
+			break;
+		case TK_A_DEVLINK_PRIO:
+			udev_device_set_devlink_priority(event->dev, cur->key.devlink_prio);
+			break;
+		case TK_A_OWNER: {
+			char owner[UTIL_NAME_SIZE];
+
+			if (event->owner_final)
+				break;
+			if (cur->key.op == OP_ASSIGN_FINAL)
+				event->owner_final = true;
+			udev_event_apply_format(event, &rules->buf[cur->key.value_off], owner, sizeof(owner));
+			event->uid = util_lookup_user(event->udev, owner);
+			info(event->udev, "OWNER %u %s:%u\n",
+			     event->uid,
+			     &rules->buf[rule->rule.filename_off],
+			     rule->rule.filename_line);
+			break;
+		}
+		case TK_A_GROUP: {
+			char group[UTIL_NAME_SIZE];
+
+			if (event->group_final)
+				break;
+			if (cur->key.op == OP_ASSIGN_FINAL)
+				event->group_final = true;
+			udev_event_apply_format(event, &rules->buf[cur->key.value_off], group, sizeof(group));
+			event->gid = util_lookup_group(event->udev, group);
+			info(event->udev, "GROUP %u %s:%u\n",
+			     event->gid,
+			     &rules->buf[rule->rule.filename_off],
+			     rule->rule.filename_line);
+			break;
+		}
+		case TK_A_MODE: {
+			char mode_str[UTIL_NAME_SIZE];
+			mode_t mode;
+			char *endptr;
+
+			if (event->mode_final)
+				break;
+			udev_event_apply_format(event, &rules->buf[cur->key.value_off], mode_str, sizeof(mode_str));
+			mode = strtol(mode_str, &endptr, 8);
+			if (endptr[0] != '\0') {
+				err(event->udev, "ignoring invalid mode '%s'\n", mode_str);
+				break;
+			}
+			if (cur->key.op == OP_ASSIGN_FINAL)
+				event->mode_final = true;
+			event->mode_set = true;
+			event->mode = mode;
+			info(event->udev, "MODE %#o %s:%u\n",
+			     event->mode,
+			     &rules->buf[rule->rule.filename_off],
+			     rule->rule.filename_line);
+			break;
+		}
+		case TK_A_OWNER_ID:
+			if (event->owner_final)
+				break;
+			if (cur->key.op == OP_ASSIGN_FINAL)
+				event->owner_final = true;
+			event->uid = cur->key.uid;
+			info(event->udev, "OWNER %u %s:%u\n",
+			     event->uid,
+			     &rules->buf[rule->rule.filename_off],
+			     rule->rule.filename_line);
+			break;
+		case TK_A_GROUP_ID:
+			if (event->group_final)
+				break;
+			if (cur->key.op == OP_ASSIGN_FINAL)
+				event->group_final = true;
+			event->gid = cur->key.gid;
+			info(event->udev, "GROUP %u %s:%u\n",
+			     event->gid,
+			     &rules->buf[rule->rule.filename_off],
+			     rule->rule.filename_line);
+			break;
+		case TK_A_MODE_ID:
+			if (event->mode_final)
+				break;
+			if (cur->key.op == OP_ASSIGN_FINAL)
+				event->mode_final = true;
+			event->mode_set = true;
+			event->mode = cur->key.mode;
+			info(event->udev, "MODE %#o %s:%u\n",
+			     event->mode,
+			     &rules->buf[rule->rule.filename_off],
+			     rule->rule.filename_line);
+			break;
+		case TK_A_ENV: {
+			const char *name = &rules->buf[cur->key.attr_off];
+			char *value = &rules->buf[cur->key.value_off];
+
+			if (value[0] != '\0') {
+				char temp_value[UTIL_NAME_SIZE];
+				struct udev_list_entry *entry;
+
+				udev_event_apply_format(event, value, temp_value, sizeof(temp_value));
+				entry = udev_device_add_property(event->dev, name, temp_value);
+				/* store in db, skip private keys */
+				if (name[0] != '.')
+					udev_list_entry_set_num(entry, true);
+			} else {
+				udev_device_add_property(event->dev, name, NULL);
+			}
+			break;
+		}
+		case TK_A_TAG: {
+			char tag[UTIL_PATH_SIZE];
+			const char *p;
+
+			udev_event_apply_format(event, &rules->buf[cur->key.value_off], tag, sizeof(tag));
+			if (cur->key.op == OP_ASSIGN || cur->key.op == OP_ASSIGN_FINAL)
+				udev_device_cleanup_tags_list(event->dev);
+			for (p = tag; *p != '\0'; p++) {
+				if ((*p >= 'a' && *p <= 'z') ||
+				    (*p >= 'A' && *p <= 'Z') ||
+				    (*p >= '0' && *p <= '9') ||
+				    *p == '-' || *p == '_')
+					continue;
+				err(event->udev, "ignoring invalid tag name '%s'\n", tag);
+				break;
+			}
+			udev_device_add_tag(event->dev, tag);
+			break;
+		}
+		case TK_A_NAME: {
+			const char *name  = &rules->buf[cur->key.value_off];
+			char name_str[UTIL_PATH_SIZE];
+			int count;
+
+			if (event->name_final)
+				break;
+			if (cur->key.op == OP_ASSIGN_FINAL)
+				event->name_final = true;
+			udev_event_apply_format(event, name, name_str, sizeof(name_str));
+			if (esc == ESCAPE_UNSET || esc == ESCAPE_REPLACE) {
+				count = util_replace_chars(name_str, "/");
+				if (count > 0)
+					info(event->udev, "%i character(s) replaced\n", count);
+			}
+			free(event->name);
+			event->name = strdup(name_str);
+			info(event->udev, "NAME '%s' %s:%u\n",
+			     event->name,
+			     &rules->buf[rule->rule.filename_off],
+			     rule->rule.filename_line);
+			break;
+		}
+		case TK_A_DEVLINK: {
+			char temp[UTIL_PATH_SIZE];
+			char filename[UTIL_PATH_SIZE];
+			char *pos, *next;
+			int count = 0;
+
+			if (event->devlink_final)
+				break;
+			if (major(udev_device_get_devnum(event->dev)) == 0)
+				break;
+			if (cur->key.op == OP_ASSIGN_FINAL)
+				event->devlink_final = true;
+			if (cur->key.op == OP_ASSIGN || cur->key.op == OP_ASSIGN_FINAL)
+				udev_device_cleanup_devlinks_list(event->dev);
+
+			/* allow  multiple symlinks separated by spaces */
+			udev_event_apply_format(event, &rules->buf[cur->key.value_off], temp, sizeof(temp));
+			if (esc == ESCAPE_UNSET)
+				count = util_replace_chars(temp, "/ ");
+			else if (esc == ESCAPE_REPLACE)
+				count = util_replace_chars(temp, "/");
+			if (count > 0)
+				info(event->udev, "%i character(s) replaced\n" , count);
+			dbg(event->udev, "rule applied, added symlink(s) '%s'\n", temp);
+			pos = temp;
+			while (isspace(pos[0]))
+				pos++;
+			next = strchr(pos, ' ');
+			while (next != NULL) {
+				next[0] = '\0';
+				info(event->udev, "LINK '%s' %s:%u\n", pos,
+				     &rules->buf[rule->rule.filename_off], rule->rule.filename_line);
+				util_strscpyl(filename, sizeof(filename), udev_get_dev_path(event->udev), "/", pos, NULL);
+				udev_device_add_devlink(event->dev, filename, cur->key.devlink_unique);
+				while (isspace(next[1]))
+					next++;
+				pos = &next[1];
+				next = strchr(pos, ' ');
+			}
+			if (pos[0] != '\0') {
+				info(event->udev, "LINK '%s' %s:%u\n", pos,
+				     &rules->buf[rule->rule.filename_off], rule->rule.filename_line);
+				util_strscpyl(filename, sizeof(filename), udev_get_dev_path(event->udev), "/", pos, NULL);
+				udev_device_add_devlink(event->dev, filename, cur->key.devlink_unique);
+			}
+			break;
+		}
+		case TK_A_ATTR: {
+			const char *key_name = &rules->buf[cur->key.attr_off];
+			char attr[UTIL_PATH_SIZE];
+			char value[UTIL_NAME_SIZE];
+			FILE *f;
+
+			if (util_resolve_subsys_kernel(event->udev, key_name, attr, sizeof(attr), 0) != 0)
+				util_strscpyl(attr, sizeof(attr), udev_device_get_syspath(event->dev), "/", key_name, NULL);
+			attr_subst_subdir(attr, sizeof(attr));
+
+			udev_event_apply_format(event, &rules->buf[cur->key.value_off], value, sizeof(value));
+			info(event->udev, "ATTR '%s' writing '%s' %s:%u\n", attr, value,
+			     &rules->buf[rule->rule.filename_off],
+			     rule->rule.filename_line);
+			f = fopen(attr, "w");
+			if (f != NULL) {
+				if (fprintf(f, "%s", value) <= 0)
+					err(event->udev, "error writing ATTR{%s}: %m\n", attr);
+				fclose(f);
+			} else {
+				err(event->udev, "error opening ATTR{%s} for writing: %m\n", attr);
+			}
+			break;
+		}
+		case TK_A_RUN: {
+			if (cur->key.op == OP_ASSIGN || cur->key.op == OP_ASSIGN_FINAL)
+				udev_list_cleanup(&event->run_list);
+			info(event->udev, "RUN '%s' %s:%u\n",
+			     &rules->buf[cur->key.value_off],
+			     &rules->buf[rule->rule.filename_off],
+			     rule->rule.filename_line);
+			udev_list_entry_add(&event->run_list, &rules->buf[cur->key.value_off], NULL);
+			break;
+		}
+		case TK_A_GOTO:
+			if (cur->key.rule_goto == 0)
+				break;
+			cur = &rules->tokens[cur->key.rule_goto];
+			continue;
+		case TK_END:
+			return 0;
+
+		case TK_M_PARENTS_MIN:
+		case TK_M_PARENTS_MAX:
+		case TK_M_MAX:
+		case TK_UNSET:
+			err(rules->udev, "wrong type %u\n", cur->type);
+			goto nomatch;
+		}
+
+		cur++;
+		continue;
+	nomatch:
+		/* fast-forward to next rule */
+		cur = rule + rule->rule.token_count;
+		dbg(rules->udev, "forward to rule: %u\n",
+		                 (unsigned int) (cur - rules->tokens));
+	}
+}
+
+void udev_rules_apply_static_dev_perms(struct udev_rules *rules)
+{
+	struct token *cur;
+	struct token *rule;
+	uid_t uid = 0;
+	gid_t gid = 0;
+	mode_t mode = 0;
+
+	if (rules->tokens == NULL)
+		return;
+
+	cur = &rules->tokens[0];
+	rule = cur;
+	for (;;) {
+		switch (cur->type) {
+		case TK_RULE:
+			/* current rule */
+			rule = cur;
+
+			/* skip rules without a static_node tag */
+			if (!rule->rule.has_static_node)
+				goto next;
+
+			uid = 0;
+			gid = 0;
+			mode = 0;
+			break;
+		case TK_A_OWNER_ID:
+			uid = cur->key.uid;
+			break;
+		case TK_A_GROUP_ID:
+			gid = cur->key.gid;
+			break;
+		case TK_A_MODE_ID:
+			mode = cur->key.mode;
+			break;
+		case TK_A_STATIC_NODE: {
+			char filename[UTIL_PATH_SIZE];
+			struct stat stats;
+
+			/* we assure, that the permissions tokens are sorted before the static token */
+			if (mode == 0 && uid == 0 && gid == 0)
+				goto next;
+			util_strscpyl(filename, sizeof(filename), udev_get_dev_path(rules->udev), "/",
+				      &rules->buf[cur->key.value_off], NULL);
+			if (stat(filename, &stats) != 0)
+				goto next;
+			if (!S_ISBLK(stats.st_mode) && !S_ISCHR(stats.st_mode))
+				goto next;
+			if (mode == 0) {
+				if (gid > 0)
+					mode = 0660;
+				else
+					mode = 0600;
+			}
+			if (mode != (stats.st_mode & 01777)) {
+				chmod(filename, mode);
+				info(rules->udev, "chmod '%s' %#o\n", filename, mode);
+			}
+
+			if ((uid != 0 && uid != stats.st_uid) || (gid != 0 && gid != stats.st_gid)) {
+				chown(filename, uid, gid);
+				info(rules->udev, "chown '%s' %u %u\n", filename, uid, gid);
+			}
+
+			utimensat(AT_FDCWD, filename, NULL, 0);
+			break;
+		}
+		case TK_END:
+			return;
+		}
+
+		cur++;
+		continue;
+next:
+		/* fast-forward to next rule */
+		cur = rule + rule->rule.token_count;
+		continue;
+	}
+}