Add rules for accessing HID devices with libusb

[robin-nitrokey]

HID devices can be accessed with libusb or with hidraw. So far, we have mostly been using hidraw and our udev rules only apply to hidraw devices. This patch adds rules for access with libusb as recommended by the hidapi developers:

https://github.com/libusb/hidapi/blob/ff67c77daddbd8e61ad3873ac16f8edc005f943f/udev/69-hid.rules

---

You can use the following code for testing:

import hid

devices = hid.enumerate()
print("paths: ")
print([d["path"] for d in devices])

for device in devices:
    if device["vendor_id"] == 0x20a0 and device["product_id"] == 0x42dd:
        h = hid.device()
        h.open_path(device["path"])
        h.close()

With hidapi v0.14.0 and v0.14.0.post4, this uses libusb. With hidapi v0.14.0.post1 to v0.14.0.post3, this uses hidraw. (This only applies if hidapi is installed from the PyPI wheels – packaged versions or manual builds may behave differently.) From my experience, a reboot is required to properly apply the new rules.

[jjakob]

The rules work fine for me using hidapi v0.14.0.post4. Checked with getfacl /dev/bus/usb/... (path to NK 3A) it shows my user as rw-.

[sosthene-nitrokey]

Tested and works.

[robin-nitrokey]

Successfully tested on NixOS 24.11.

Overlay

    (final: prev: {
      nitrokey-udev-rules = prev.nitrokey-udev-rules.overrideAttrs (finalAttrs: prevAttrs: {
        src = pkgs.fetchFromGitHub {
          owner = "Nitrokey";
          repo = "nitrokey-udev-rules";
          rev = "5ffac5d0d9dc776f241a9553be5e92656585bd53";
          hash = "sha256-ZALVjSiIGRK+DlFscOhbnZJbjXP15bfgV+ZOqQQ6h7A=";
        };
        dontBuild = true;
        doCheck = false;
      });
    })