Bug 2004511

Summary:	IPC access control files override each other
Product:	Red Hat Enterprise Linux 8	Reporter:	Zoltan Fridrich <zfridric>
Component:	usbguard	Assignee:	Zoltan Fridrich <zfridric>
Status:	CLOSED ERRATA	QA Contact:	Dalibor Pospíšil <dapospis>
Severity:	low	Docs Contact:
Priority:	medium
Version:	8.6	CC:	alakatos, dapospis
Target Milestone:	rc	Keywords:	AutoVerified, Triaged
Target Release:	---	Flags:	pm-rhel: mirror+
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:	usbguard-1.0.0-3.el8	Doc Type:	No Doc Update
Doc Text:		Story Points:	---
Clone Of:
Clones:	2009227 (view as bug list)		Environment:
Last Closed:	2022-05-10 13:36:46 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:
Bug Blocks:	2009227

Description Zoltan Fridrich 2021-09-15 13:21:19 UTC

Description of problem:
IPC access control files override each other if more apply to a user.

Version-Release number of selected component (if applicable):


How reproducible:
always

Steps to Reproduce:

1. let's have a user bob (uid 1000) who is a member of a group bob (gid 1000)
2. create two IPC files, one for the user (Devices=list) and one for the group (Policy=list)
root# usbguard add-user 1000 -d list
root# usbguard add-user -g 1000 -p list
3. restart usbguard daemon and try executing the following commands with user bob
bob$ usbguard list-devices
1: allow ... OK, prints out devices
bob$ usbguard list-rules
IPC ERROR: request id=1: IPC method: usbguard.IPC.listRules: Permission denied

Actual results:
User bob can not list usbguard rules despite being a member of group bob that has permissions Policy=list

Expected results:
A list of rules would show up

Additional info:

Comment 14 errata-xmlrpc 2022-05-10 13:36:46 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (usbguard bug fix and enhancement update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2022:1779