Bug 1276584 - Shipped udev rules does not works as expected
Summary: Shipped udev rules does not works as expected
Keywords:
Status: CLOSED NEXTRELEASE
Alias: None
Product: Fedora
Classification: Fedora
Component: ykpers
Version: 23
Hardware: x86_64
OS: Linux
unspecified
medium
Target Milestone: ---
Assignee: Maxim Burgerhout
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2015-10-30 08:48 UTC by Anton Barsukov
Modified: 2015-10-30 15:11 UTC (History)
2 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2015-10-30 15:11:22 UTC
Type: Bug
Embargoed:


Attachments (Terms of Use)

Description Anton Barsukov 2015-10-30 08:48:39 UTC
Description of problem:
Unprivileged user don't have sufficient permissions to access yubikey USB device.

Version-Release number of selected component (if applicable):
ykpers-1.17.2-2.fc22.x86_64

How reproducible:
ykinfo -a

Steps to Reproduce:
1. Insert yubikey USB device to PC
2. Run ykinfo -a
3. Got error message

Actual results:
USB error: Access denied (insufficient permissions)

Expected results:
serial: <actual serial number here>
serial_hex: <actual serial hex number here>
serial_modhex: <actual serial modhex here>
version: <actual version here>
touch_level: 1793
programming_sequence: 1
slot1_status: 1
slot2_status: 0
vendor_id: 1050
product_id: 10

Additional info:

Replace /usr/lib/udev/rules.d/70-yubikey.rules 
(https://github.com/Yubico/yubikey-personalization/blob/master/70-yubikey.rules)
with /usr/lib/udev/rules.d/69-yubikey.rules
(https://github.com/Yubico/yubikey-personalization/blob/master/69-yubikey.rules)
and everything will be work like a charm.

Quick workaround howto:
sudo curl https://raw.githubusercontent.com/Yubico/yubikey-personalization/master/69-yubikey.rules -o /etc/udev/rules.d/69-yubikey.rules

sudo udevadm control --reload-rules
sudo udevadm trigger

Comment 1 Kevin Fenzi 2015-10-30 15:11:22 UTC
This is already fixed in the version in updates-testing. 

'dnf --enablerepo=updates-testing update ykpers'

and provide karma on https://bodhi.fedoraproject.org/updates/ykpers-1.17.2-3.fc22

I'll push it to stable now too, so it should be a normal update soon.


Note You need to log in before you can comment on or make changes to this bug.