Bug 237412

Summary:	Firewire camera permissions
Product:	[Fedora] Fedora	Reporter:	simon
Component:	hal	Assignee:	David Zeuthen <davidz>
Status:	CLOSED WORKSFORME	QA Contact:	Fedora Extras Quality Assurance <extras-qa>
Severity:	medium	Docs Contact:
Priority:	medium
Version:	rawhide	CC:	deknuydt, harald, krh, mclasen, tmraz
Target Milestone:	---
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2007-09-21 16:14:17 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:
Bug Blocks:	235704

Description simon 2007-04-22 09:48:52 UTC

Description of problem:
When I plug my firewire camera into my machine, it gives me a /dev/video1394/0
which is only readable/writable by the owner (root I think). USB video devices
are created with mode 0660. Can firewire video devices also be created with this
mode?

I think the relevant like would be;

KERNEL=="video1394*",           NAME="video1394/%n", MODE="0660"

Currently I have to manually chmod the device.

Version-Release number of selected component (if applicable):
udev-095-17.fc6

How reproducible:
Always

Steps to Reproduce:
1.
2.
3.
  
Actual results:


Expected results:


Additional info:

Comment 1 Harald Hoyer 2007-04-23 08:05:17 UTC

better done by pam_console

Comment 2 Tomas Mraz 2007-04-23 10:11:39 UTC

pam_console will not change the file mode of the device. By adding it to
pam_console configuration it will just became owned by the console user when he
is logged in.

I don't know what you are trying to achieve. If you just want to have the camera
device readable/writable by console user it would be logical to just add it to
pam_console configuration. If you want it accessible by some group specifically
created for that purpose, it has to be changed in udev.

Comment 3 simon 2007-04-23 10:53:53 UTC

I would like to be able to use my firewire camera without having to change the
permissions on the device. USB cameras already work fine.
It was my understanding that udev setup the permissions for this.

USB device perms;
lrwxrwxrwx 1 root root 6 Apr 23 11:22 /dev/video -> video0

FireWire device perms;
crw-rw---- 1 root root 171, 16 Apr 23 11:38 /dev/video1394/0

Looking back, the mode specified in the udev file doesn't correspond to that
shown by ls. I'm not actually sure now where that mode is being set.

Comment 4 Harald Hoyer 2007-04-23 12:39:15 UTC

hal is setting usb camera permissions iirc

Comment 5 Bert DeKnuydt 2007-04-23 13:34:32 UTC

We've been adding a file '60-firewire.perms' in /etc/security/console.perms.d
reading:

#Set Permissions for FireWire
<video1394>=/dev/video1394/?
<console> 0600 <video1394> 0600 root

And that seems to do the job ...

Comment 6 Tomas Mraz 2007-04-23 19:10:38 UTC

Yes. So the real request is to add /dev/video1394/* to
/etc/security/console.perms.d/50-default.perms.

As we are near F7 release this can wait for F8 + F7 update.

Comment 7 Tomas Mraz 2007-09-21 13:46:49 UTC

pam_console is now obsolete for handling device permissions. hal should set them
instead.

Comment 10 David Zeuthen 2007-09-21 16:14:17 UTC

I just verified that this works in Rawhide using on of Kristian's Firewire
devices (you get an ACL only for active sessions). Please reopen if there are
any problems. Thanks.