# Allow members of _tss group to access tpm device notify 100 { match "system" "DEVFS"; match "subsystem" "CDEV"; match "type" "CREATE"; match "cdev" "tpm[0-9]+"; action "chgrp _tss /dev/tpm0; chmod g+rw /dev/tpm0"; };