Description of problem: The USBGuard is running an IPC "server" as a root and usbguard-notifier or usbguard-applet-qt are running an IPC "client" under standard user. This permission inconsistency results in extending daemon capabilities with DAC_OVERRIDE which is not good at all. Version-Release number of selected component (if applicable): usbguard-0.7.6-1.fc30.x86_64 How reproducible: Always. Steps to Reproduce: 1. install usbguard 2. start daemon with systemd as root/sudo: `systemctl start usbguard.service` Actual results: /dev/shm/random_file_name directory has wrong gid. Expected results: Gid of the /dev/shm/random_file_name directory must be set to root. Additional info: The USBGuard is running an IPC "server" as a root and usbguard-notifier or usbguard-applet-qt are running an IPC "client" under standard user. This permission inconsistency results in extending daemon capabilities with DAC_OVERRIDE which is not good at all.
FEDORA-2019-d4c4bf697a has been submitted as an update to Fedora 31. https://bodhi.fedoraproject.org/updates/FEDORA-2019-d4c4bf697a
usbguard-0.7.6-4.fc31 has been pushed to the Fedora 31 testing repository. If problems still persist, please make note of it in this bug report. See https://fedoraproject.org/wiki/QA:Updates_Testing for instructions on how to install test updates. You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2019-d4c4bf697a
usbguard-0.7.6-5.fc31 has been pushed to the Fedora 31 testing repository. If problems still persist, please make note of it in this bug report. See https://fedoraproject.org/wiki/QA:Updates_Testing for instructions on how to install test updates. You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2019-d4c4bf697a
usbguard-0.7.6-6.fc31 has been pushed to the Fedora 31 testing repository. If problems still persist, please make note of it in this bug report. See https://fedoraproject.org/wiki/QA:Updates_Testing for instructions on how to install test updates. You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2019-d4c4bf697a
usbguard-0.7.6-6.fc31 has been pushed to the Fedora 31 stable repository. If problems still persist, please make note of it in this bug report.