Bug 1554406

+++ This bug was initially created as a clone of Bug #1554032 +++

Dear Red Hat,

# rpm -qf /usr/lib/udev/rules.d/65-sane-backends.rules
sane-backends-1.0.27-12.fc27.x86_64

Does not give saned permission to use your scanner.

Please add the following two line to this file:

# Permissions must be given to the saned user to access scanners
ACTION=="add", ENV{libsane_matched}=="yes", GROUP="saned", MODE="0660"

Many thanks,
-T

--- Additional comment from Todd on 2018-03-10 16:30:07 EST ---

Note: you have to reboot to get this to take:

$ scanimage -L
device `epkowa:interpreter:001:003' is a Epson Perfection V300 flatbed scanner
device `net:localhost:epkowa:interpreter:001:003' is a Epson Perfection V300 flatbed scanner

$ xsane net:localhost
worked

Unplugging and replugging the scanner:
$ scanimage -L
device `epkowa:interpreter:001:008' is a Epson Perfection V300 flatbed scanner
device `net:localhost:epkowa:interpreter:001:008' is a Epson Perfection V300 flatbed scanner

$ xsane net:localhost
worked

--- Additional comment from Zdenek Dohnal on 2018-03-12 07:00:52 EDT ---

Hi Todd,

thank you for reporting this issue! I'll create another udev file for just saned - because IMHO it doesn't need to be applied when saned isn't installed (sane-backends-daemon isn't installed) and I rewrite the patch a little bit.
Your patch sets the group ownership forcefully to saned, which blocks other groups to access usb port - I know, probably there will not be other groups, which try to access the port, but IMO it is bad to block device this way. I can do the same thing, but non-blocking way, by ACL. So the proposed rule is:

ENV{libsane_matched}=="yes", RUN+="/usr/bin/setfacl -m g:saned:rw $env{DEVPATH}"

Would you mind testing the issue when I create testing package?

--- Additional comment from Fedora Update System on 2018-03-12 10:19:14 EDT ---

sane-backends-1.0.27-15.fc27 has been submitted as an update to Fedora 27. https://bodhi.fedoraproject.org/updates/FEDORA-2018-27b31a3903