https://bugzilla.novell.com/show_bug.cgi?id=235059 sndirsch@novell.com changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |jw@novell.com, lnussel@novell.com Status|NEW |NEEDINFO Info Provider| |lnussel@novell.com ------- Comment #1 from sndirsch@novell.com 2007-01-14 20:41 MST ------- /etc/resmgr.conf.d/99-avrdude_parport.conf: add /dev/parport0 desktop add /dev/parport1 desktop add /dev/parport2 desktop add /dev/parport3 desktop add /dev/parport4 desktop add /dev/parport5 desktop add /dev/parport6 desktop add /dev/parport7 desktop Ludwig, "add" has been replaced with what? BTW, /etc/resmgr.conf.d/99-uisp_parport.conf is identical. Actually 99-avrdude_parport.conf has been a copy of 99-uisp_parport.conf from the beginning. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.

https://bugzilla.novell.com/show_bug.cgi?id=235059 sndirsch@novell.com changed: What |Removed |Added ---------------------------------------------------------------------------- CC|jw@novell.com |sndirsch@novell.com AssignedTo|sndirsch@novell.com |jw@novell.com ------- Comment #3 from sndirsch@novell.com 2007-01-15 02:45 MST -------

[...], please remove the resmgr config file. done. Jürgen, your turn (uisp package).

-- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.

https://bugzilla.novell.com/show_bug.cgi?id=235059 lnussel@novell.com changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEEDINFO |NEW Info Provider|lnussel@novell.com | ------- Comment #5 from lnussel@novell.com 2007-01-15 08:53 MST ------- /usr/share/doc/packages/hal-resmgr/README - hal needs to know about /dev/parport* first - I would advise against using some generic 'parport' class where anyone gets access to all parallel ports. Introduce a separate one for the specific purpose of granting access to the controller instead. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.

https://bugzilla.novell.com/show_bug.cgi?id=235059 ------- Comment #7 from rschiele@gmail.com 2007-01-15 12:56 MST ------- Ludwig, I agree with you that allowing access to all parport devices by default is not a very good idea but 1. there should be a documented way (example config file) how a sysadmin can setup this _in an easy way_ if he likes to have it that way, 2. I can't see how you want to give access to the controller device directly --- contrary to USB devices from your example file these devices cannot be easily identified by probing for them, and 3. the documentation situation of all that hal/resmgr/udev is extremely bad, the way to "do things the right way" changes quite frequently in recent times without having appropriate migration documentation available --- for instance documentation for simple questions like "how can one grant access to a specific device in a persistent way" is just not available to the average sysadmin. --- Note that I don't claim it does not exist at all but it is (a) not in a place where the average user will expect to find it and (b) it's complexity level is not appropriate to answer these simple questions in an appropriate way. Actually I know a huge number of sysadmins that work around this hal/resmgr/udev stuff instead of making use of it and thus this is a regression for them compared to the old static device files. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.

https://bugzilla.novell.com/show_bug.cgi?id=235059 ------- Comment #9 from rschiele@gmail.com 2007-01-16 02:25 MST ------- It's not that I am against the changes. --- Not at all. The problem with the documentation in the hal/resmgr/udev packages are mainly that (if existent) they describe and give examples for the shiny new features but basically don't explain how to do the things that were possible before in an easy way. The _specific_ and most annoying problem for most people I actually see in exactly the question Stefan had initially here in this thread: How does one change permissions for a specific device (named just by the device name and no additional magic) in a persistent way. A short simple step-by-step instruction would do as long as this is maintained over future changes. The current situation is more like giving a fancy modern VCR set to some old people not used to technology. When they ask how to record the current TV show on channel 2 you answer that it is not required to just record the current TV show because they could do programming their VCR over the internet instead of just telling them how to record the current TV show. In this thread you did exactly this: Instead of just answering Stefan's and Juergen's questions on how to change permissions for /dev/parportX you gave the advice not to do so. While giving this advice is fine it would be even better if you could just answer the question as well. The file you mentioned (/usr/share/doc/packages/hal-resmgr/README) does not really provide this information. Maybe actually the problem exactly _is_ that the people maintaining these packages typically know where to find all the information and thus don't see the problem any more. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.

https://bugzilla.novell.com/show_bug.cgi?id=235059 ------- Comment #11 from lnussel@novell.com 2007-01-16 02:53 MST ------- Yes, for parport* hal needs to be patched so resmgr can do anything in the first place. Robert is right however. His request for matching a device name is probably so simple I didn't even think about it. Here's an example for a fictional device that is known to hal: # mkdir /etc/hal/fdi/policy/20user # cat <<EOF > /etc/hal/fdi/policy/20user/50-missilelauncher.fdi <?xml version="1.0" encoding="ISO-8859-1"?> <deviceinfo version="0.2"> <device> <match key="linux.device_file" string="/dev/missilelauncher"> <merge key="resmgr.class" type="string">wmd</merge> </match> </device> </deviceinfo> EOF # cat <<EOF > /etc/resmgr.conf.d/50-wmd.conf ## define a new class 'wmd' class wmd ## grant access to class 'wmd' when access to 'desktop' is granted ## (ie everyone on a local console) class desktop includes wmd ## maybe you want to restrict access to 'wmd' to members of a group instead #allow wmd group=generals EOF # rcresmgr restart # rchal restart -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.

https://bugzilla.novell.com/show_bug.cgi?id=235059 ------- Comment #13 from sndirsch@novell.com 2007-01-16 07:53 MST ------- It is known to hal after doing this one? # mkdir /etc/hal/fdi/policy/20user # cat <<EOF > /etc/hal/fdi/policy/20user/50-missilelauncher.fdi <?xml version="1.0" encoding="ISO-8859-1"?> <deviceinfo version="0.2"> <device> <match key="linux.device_file" string="/dev/missilelauncher"> <merge key="resmgr.class" type="string">wmd</merge> </match> </device> </deviceinfo> EOF Or is ther more required to make it known to hal? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.

https://bugzilla.novell.com/show_bug.cgi?id=235059 jw@novell.com changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |asvetter@cip.physik.uni-wuerzburg.de ------- Comment #15 from jw@novell.com 2007-01-19 09:48 MST ------- *** Bug 129340 has been marked as a duplicate of this bug. *** -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.

https://bugzilla.novell.com/show_bug.cgi?id=235059 sndirsch@novell.com changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |eich@novell.com ------- Comment #17 from sndirsch@novell.com 2007-05-12 04:28 MST ------- Egbert, JFYI. Since Matthias or me is in Cc of this bugreport or the reported itself, it might be interesting for you as well. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.

https://bugzilla.novell.com/show_bug.cgi?id=235059#c19 --- Comment #19 from Stefan Dirsch 2007-11-25 13:15:01 MST --- Can't we work on this for 10.3? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=235059#c21 --- Comment #21 from Stefan Dirsch 2007-11-26 03:10:14 MST --- Sorry, I mean 11.0. :-) -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=235059#c23 Danny Kukawka changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |NEEDINFO Info Provider| |jw@novell.com --- Comment #23 from Danny Kukawka 2007-11-27 10:33:19 MST --- (In reply to comment #19 from Stefan Dirsch)

Can't we work on this for 10.3?

Yes, we can work on this, but not by adding simply every device in sysfs to HAL. We should add only what make sense and is usefull, and not every sysfs entry which in the most cases provide abosultely no info. about the ppdev device: I have no machine with such a device. Please provide more info about the device (grep . /sys/devices/virtual/ppdev/* -R, HAL log (start hal with additional parameter --verbose=yes --use-syslog in the rc file)) -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=235059 User jw@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=235059#c25 --- Comment #25 from Juergen Weigert 2007-12-03 13:33:08 MST --- How would the patch look like, if 'the dozens of virtual console devices were excluded'? I am asking this silly question, As I cannot see where they are included. Furthermore, I cannot see a way how hal could guess to which parport uisp hardware (or anything else, which is write-only) is attached. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=235059 User lnussel@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=235059#c26 Ludwig Nussel changed: What |Removed |Added ---------------------------------------------------------------------------- Attachment #113138|0 |1 is obsolete| | Status|NEEDINFO |NEW Info Provider|dkukawka@novell.com | --- Comment #26 from Ludwig Nussel 2007-12-04 01:53:45 MST --- Created an attachment (id=185738) --> (https://bugzilla.novell.com/attachment.cgi?id=185738) updated patch The patchs adds a generic handler for unknown devices so all tty devices are included implicitly. This updated patch adds an ugly exception. hal cannot guess what's connected behind a parallel port. You'd have to provide an fdi file that matches e.g. for /dev/parport0 and then adds the necessary information. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=235059 User jw@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=235059#c28 --- Comment #28 from Juergen Weigert 2008-02-04 08:30:56 MST --- I had my dose of udev hacking this weekend. I just found out, all my rules were ignored due to bnc#358391 . I am adding /etc/udev/rules.d/98-parport.rules containing the following line: KERNEL=="parport*" GROUP="uucp", MODE="0660" to make this work without reboot, run rmmod ppdev; modprobe ppdev -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=235059 User jw@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=235059#c30 --- Comment #30 from Juergen Weigert 2008-02-04 09:19:09 MST --- I need to have multiple users accessing the device. My local homed username and my suse-nfs-homed username. would group lp be more suitable, or a 'dongle' group of our own choice? If users need to join a group is an acceptable burden. Editing config files manually is not my understanding of user-experience. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=235059 User lnussel@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=235059#c31 Ludwig Nussel changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEEDINFO |ASSIGNED Info Provider|lnussel@novell.com | --- Comment #31 from Ludwig Nussel 2008-02-06 01:12:43 MST --- members of the lp group will be able to mess with the printing system ie potentially get root access by modifying cups' config. If you want to go via group you have to add your own one. But then that's still retarded. The clean solution is via hal so ACLs can be used. Even then I'd in general vote against allowing users access to all parallel ports just because some package got installed (just like you don't start arbitrary deamons on package install). There could still be a printer connected to any of the available ports. So some sort of configuration would be needed always. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=235059 User jw@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=235059#c33 --- Comment #33 from Juergen Weigert 2008-02-16 07:26:33 MST --- Group="dialout" is a requirement for kinternet. Nothing is wrong with that, afaik. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=235059 User sndirsch@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=235059#c34 Stefan Dirsch changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |sndirsch@novell.com AssignedTo|sndirsch@novell.com |jw@novell.com Status|ASSIGNED |NEW --- Comment #34 from Stefan Dirsch 2008-07-16 14:53:31 MDT --- Back to Jürgen. I no longer use a machine with parallel port. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=235059 User jw@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=235059#c36 Juergen Weigert changed: What |Removed |Added ---------------------------------------------------------------------------- AssignedTo|jw@novell.com |bnc-team-screening@forge.provo.novell.com --- Comment #36 from Juergen Weigert 2008-07-17 02:56:06 MDT --- Back to screening team for resource allocation. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=235059 User lnussel@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=235059#c37 Ludwig Nussel changed: What |Removed |Added ---------------------------------------------------------------------------- AssignedTo|lnussel@novell.com |dkukawka@novell.com --- Comment #37 from Ludwig Nussel 2008-08-18 03:10:25 MDT --- pingpong alert. Danny, this is how it looks in sysfs AFAICS, could you add this to hal? # l -R /sys/class/ppdev/ /sys/class/ppdev/: insgesamt 0 drwxr-xr-x 2 root root 0 18. Aug 11:05 ./ drwxr-xr-x 39 root root 0 18. Aug 11:05 ../ lrwxrwxrwx 1 root root 0 18. Aug 11:05 parport0 -> ./../devices/pnp0/00:0a/ppdev/parport0/ # l -R /sys/devices/pnp0/00:0a/ppdev /sys/devices/pnp0/00:0a/ppdev: insgesamt 0 drwxr-xr-x 3 root root 0 18. Aug 11:05 ./ drwxr-xr-x 4 root root 0 18. Aug 11:05 ../ drwxr-xr-x 3 root root 0 18. Aug 11:05 parport0/ /sys/devices/pnp0/00:0a/ppdev/parport0: insgesamt 0 drwxr-xr-x 3 root root 0 18. Aug 11:05 ./ drwxr-xr-x 3 root root 0 18. Aug 11:05 ../ -r--r--r-- 1 root root 4096 18. Aug 11:05 dev lrwxrwxrwx 1 root root 0 18. Aug 11:05 device -> ../../../00:0a/ drwxr-xr-x 2 root root 0 18. Aug 11:05 power/ lrwxrwxrwx 1 root root 0 18. Aug 11:05 subsystem -> ./../../../../class/ppdev/ -rw-r--r-- 1 root root 4096 18. Aug 11:05 uevent /sys/devices/pnp0/00:0a/ppdev/parport0/power: insgesamt 0 drwxr-xr-x 2 root root 0 18. Aug 11:05 ./ drwxr-xr-x 3 root root 0 18. Aug 11:05 ../ -rw-r--r-- 1 root root 4096 18. Aug 11:05 wakeup -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=235059 User dkukawka@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=235059#c38 Danny Kukawka changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |NEEDINFO Info Provider| |lnussel@novell.com --- Comment #38 from Danny Kukawka 2008-10-17 03:04:17 MDT --- Has anyone a machine with /dev/parport I can login to for testing? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=235059 User dkukawka@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=235059#c43 Danny Kukawka changed: What |Removed |Added ---------------------------------------------------------------------------- Component|Development |Development Product|openSUSE 10.3 |openSUSE 11.1 Version|unspecified |Factory --- Comment #43 from Danny Kukawka 2008-10-17 09:00:26 MDT --- Fixed in the hal package in this repo: http://download.opensuse.org/repositories/home:/dkukawka:/hal-testing/openSU... That's what HAL now has: udi = '/org/freedesktop/Hal/devices/ppdev_parport0' info.capabilities = {'ppdev'} (string list) info.category = 'ppdev' (string) info.parent = '/org/freedesktop/Hal/devices/pnp_PNP0401' (string) info.product = 'Parallel Port Device' (string) info.subsystem = 'ppdev' (string) info.udi = '/org/freedesktop/Hal/devices/ppdev_parport0' (string) linux.device_file = '/dev/parport0' (string) linux.hotplug_type = 2 (0x2) (int) linux.subsystem = 'ppdev' (string) linux.sysfs_path = '/sys/devices/pnp0/00:07/ppdev/parport0' (string) -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=235059 User lnussel@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=235059#c45 Ludwig Nussel changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEEDINFO |NEW Info Provider|lnussel@novell.com | --- Comment #45 from Ludwig Nussel 2008-10-21 00:39:33 MDT --- I'd use a separate class, something like org.freedesktop.hal.device-access.parport Default no access (auth_admin_keep_always) -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=235059 User lnussel@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=235059#c47 Ludwig Nussel changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEEDINFO |NEW Info Provider|lnussel@novell.com | --- Comment #47 from Ludwig Nussel 2008-10-21 02:34:28 MDT --- Yes. The parallelports are normally used by the printer daemon. Normal users shouldn't be able to interfere by default. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=235059 User dkukawka@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=235059#c49 Danny Kukawka changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution| |FIXED --- Comment #49 from Danny Kukawka 2008-10-21 09:50:37 MDT --- fixed in git. Will be part of CODE11 -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=235059 User jw@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=235059#c50 --- Comment #50 from Juergen Weigert 2009-02-27 07:21:23 MST --- A possible alternative to 'adding the user to group uucp' or 'running everything under sudo' might now be: polkit-auth --obtain org.freedesktop.hal.device-access.parport -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.