Mailinglist Archive: opensuse-bugs (13478 mails)

[bugzilla_noreply@xxxxxxxxxx]

https://bugzilla.novell.com/show_bug.cgi?id=336704

           Summary: user is not allowed to access cyberjack USB cardreader
           Product: openSUSE 10.3
           Version: Final
          Platform: Other
        OS/Version: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
        AssignedTo: security-team@xxxxxxx
        ReportedBy: wolfgang@xxxxxxxxxxxxx
         QAContact: qa@xxxxxxx
          Found By: ---


A normal user has no access to the cyberjack USB cardreader:

Bus 002 Device 002: ID 0c4b:0300 Reiner SCT Kartensysteme GmbH cyberJack
pinpad(a)

Hygiea:~ # ll /dev/bus/usb/002/002
crw-r--r-- 1 root root 189, 129 Oct 25 08:43 /dev/bus/usb/002/002

wolfi@Hygiea:~> LD_LIBRARY_PATH=/usr/lib64/readers strace cjgeldkarte 2>&1 | 
grep 002/002
open("/dev/bus/usb/002/002", O_RDWR)    = -1 EACCES (Permission denied)
open("/dev/bus/usb/002/002", O_RDONLY)  = 5
open("/dev/bus/usb/002/002", O_RDWR)    = -1 EACCES (Permission denied)
open("/dev/bus/usb/002/002", O_RDONLY)  = 4
open("/dev/bus/usb/002/002", O_RDWR)    = -1 EACCES (Permission denied)
open("/dev/bus/usb/002/002", O_RDONLY)  = 5
open("/dev/bus/usb/002/002", O_RDWR)    = -1 EACCES (Permission denied)
open("/dev/bus/usb/002/002", O_RDONLY)  = 4
open("/dev/bus/usb/002/002", O_RDWR)    = -1 EACCES (Permission denied)
open("/dev/bus/usb/002/002", O_RDONLY)  = 5
open("/dev/bus/usb/002/002", O_RDWR)    = -1 EACCES (Permission denied)
open("/dev/bus/usb/002/002", O_RDONLY)  = 4
open("/dev/bus/usb/002/002", O_RDWR)    = -1 EACCES (Permission denied)
open("/dev/bus/usb/002/002", O_RDONLY)  = 5
open("/dev/bus/usb/002/002", O_RDWR)    = -1 EACCES (Permission denied)
open("/dev/bus/usb/002/002", O_RDONLY)  = 4
open("/dev/bus/usb/002/002", O_RDWR)    = -1 EACCES (Permission denied)
open("/dev/bus/usb/002/002", O_RDONLY)  = 4

In previous openSUSE versions access was granted (AFAIK) because of
/etc/hal/fdi/policy/10osvendor/80-cyberjack.fdi


-- 
Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.