[Bug 1222186] New: VirtualBox not allowed to access USB devices although user is in vboxusers group
https://bugzilla.suse.com/show_bug.cgi?id=1222186 Bug ID: 1222186 Summary: VirtualBox not allowed to access USB devices although user is in vboxusers group Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: openSUSE Tumbleweed Status: NEW Severity: Normal Priority: P5 - None Component: Virtualization:Other Assignee: virt-bugs@suse.de Reporter: timothyadams@ymail.com QA Contact: qa-bugs@suse.de Target Milestone: --- Found By: --- Blocker: --- Since DUPing this morning to the big 20240329 Tumbleweed snapshot (re CVE-2024-3094), I have again lost USB passthrough to scanners in my Win 7 VM in Virtualbox 7.14. In the ~/.config/VirtualBox/VBoxSVC.log, I see many instances of: ----------- 00:00:11.669981 nspr-5 WARNING [COM]: aRC=NS_ERROR_FAILURE (0x80004005) aIID={e54f6256-97a7-4947-8a78-10c013ddf4b8} aComponent={HostWrap} aText={VirtualBox is not currently allowed to access USB devices. You can change this by adding your user to the 'vboxusers' group. Please see the user manual for a more detailed explanation}, preserve=true aResultDetail=0 ----------- However, the user already was in the vboxusers group! I also see that while logged in as user, I can't see the contents of /dev/vboxusb. The directory is shown as locked, and belonging to vboxusers. Troubleshooting steps taken so far: * Remove user from vboxusers, reboot, add user back to vboxusers, reboot. It didn't help. * Uninstall the VirtualBox extension pack, reboot, re-install the extension pack, reboot. This also didn't help. I'm not 100% certain that this problem appeared only with the 20240329 snapshot. I haven't used the scanners in a few days, might have DUPd to an earlier snapshot in the meantime. -- You are receiving this mail because: You are on the CC list for the bug.
https://bugzilla.suse.com/show_bug.cgi?id=1222186 https://bugzilla.suse.com/show_bug.cgi?id=1222186#c1 Larry Rainey <llrainey15@gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |llrainey15@gmail.com --- Comment #1 from Larry Rainey <llrainey15@gmail.com> --- Known issue with 6.8 kernel - Oracle is also aware. USB query returns no devices which is why none show up. Issue is also in 15.6 and Slowroll. Other Flavors of Linux like Mint Linux and 6.8 also have this issue. -- You are receiving this mail because: You are on the CC list for the bug.
https://bugzilla.suse.com/show_bug.cgi?id=1222186 https://bugzilla.suse.com/show_bug.cgi?id=1222186#c3 robert spitzenpfeil <rs.opensuse@spitzenpfeil.org> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |rs.opensuse@spitzenpfeil.or | |g --- Comment #3 from robert spitzenpfeil <rs.opensuse@spitzenpfeil.org> --- Observations: * permissions for /dev/vboxusb are wrong * I was missing /dev/udev/rules.d/60-vboxdrv.rules (created by vboxdrv.sh) * /usr/lib/virtualbox/vboxdrv.sh lines 63-65 should (IMO) read (it was /etc/vboxusb on my box): chmod "${DEVICE_MODE}" /dev/vboxusb/ chmod "${DEVICE_MODE}" /dev/vboxusb/* chmod "${DEVICE_MODE}" /dev/vboxusb/*/* * /usr/lib/virtualbox/VBoxCreateUSBNode.sh line 56 should read (there should be no space after 2): chmod 0660 "$devpath" 2> /dev/null I've added a line after that to fix directory perms find /dev/vboxusb -type d -exec chmod g+x {} \; * What's still not OK: after reboot, the perms for /dev/vboxusb are wrong, only after plugging in say a usb stick udev triggers running the script and perms are ok. If you want to pass through a built-in usb device, this is not good. -- You are receiving this mail because: You are on the CC list for the bug.
https://bugzilla.suse.com/show_bug.cgi?id=1222186 https://bugzilla.suse.com/show_bug.cgi?id=1222186#c4 --- Comment #4 from robert spitzenpfeil <rs.opensuse@spitzenpfeil.org> --- Don't mind the last bullet point. Now it works for me. -- You are receiving this mail because: You are on the CC list for the bug.
https://bugzilla.suse.com/show_bug.cgi?id=1222186 https://bugzilla.suse.com/show_bug.cgi?id=1222186#c5 --- Comment #5 from robert spitzenpfeil <rs.opensuse@spitzenpfeil.org> --- I've had to run vboxdrv.sh setup (as root) to re-create the missing udev rules. -- You are receiving this mail because: You are on the CC list for the bug.
https://bugzilla.suse.com/show_bug.cgi?id=1222186 https://bugzilla.suse.com/show_bug.cgi?id=1222186#c6 --- Comment #6 from robert spitzenpfeil <rs.opensuse@spitzenpfeil.org> --- Created attachment 873962 --> https://bugzilla.suse.com/attachment.cgi?id=873962&action=edit fix superfluous space and dir perms -- You are receiving this mail because: You are on the CC list for the bug.
https://bugzilla.suse.com/show_bug.cgi?id=1222186 https://bugzilla.suse.com/show_bug.cgi?id=1222186#c7 --- Comment #7 from robert spitzenpfeil <rs.opensuse@spitzenpfeil.org> --- Created attachment 873963 --> https://bugzilla.suse.com/attachment.cgi?id=873963&action=edit fix directory name -- You are receiving this mail because: You are on the CC list for the bug.
https://bugzilla.suse.com/show_bug.cgi?id=1222186 robert spitzenpfeil <rs.opensuse@spitzenpfeil.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Attachment #873962|fix superfluous space and |fix path: 'etc' --> 'dev' description|dir perms | -- You are receiving this mail because: You are on the CC list for the bug.
https://bugzilla.suse.com/show_bug.cgi?id=1222186 robert spitzenpfeil <rs.opensuse@spitzenpfeil.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Attachment #873963|fix directory name |fix directory permissions description| |and buggy stderr | |redirection -- You are receiving this mail because: You are on the CC list for the bug.
https://bugzilla.suse.com/show_bug.cgi?id=1222186 https://bugzilla.suse.com/show_bug.cgi?id=1222186#c12 --- Comment #12 from Larry Rainey <llrainey15@gmail.com> --- The issue is wrong major minor numbers the should be crw-rw---- 1 root vboxusers 10, 122 Apr 1 08:24 /dev/vboxdrv crw-rw-rw- 1 root root 10, 121 Apr 1 08:24 /dev/vboxdrvu crw-rw---- 1 root vboxusers 10, 120 Apr 1 08:24 /dev/vboxnetctl they are crw-rw---- 1 root vboxusers 10, 120 Apr 1 07:27 /dev/vboxdrv crw-rw---- 1 root vboxusers 10, 119 Apr 1 07:27 /dev/vboxdrvu crw-rw---- 1 root vboxusers 10, 118 Apr 1 07:27 /dev/vboxnetctl I have a good fix - need others to validate it. sudo /usr/lib/virtualbox/vboxdrv.sh start will fix it without a reboot with this file too big to paste here so here is a link put it in /usr/lib/virtualbox/ https://paste.opensuse.org/pastes/9641ebe078e6 -- You are receiving this mail because: You are on the CC list for the bug.
https://bugzilla.suse.com/show_bug.cgi?id=1222186 https://bugzilla.suse.com/show_bug.cgi?id=1222186#c18 --- Comment #18 from Larry Rainey <llrainey15@gmail.com> --- You have to replace the one in /usr/lib/virtualbox/vboxdrv.sh with the one in susepaste just running will not fix the issue - you have to vi new.sh with the code in susepaste then chmod 755 new.sh, then sudo new.sh. If it fixes your usb issue then move new.sh to /usr/lib/virtualbox/vboxdrv.sh I matched exactly how Oracle Virtualbox installed the device nodes. That is how they do it - so I matched it. It did fix the USB issue. Could robert spitzenpfeil do a diff on mine vs the one zypper installed? and tell me what program you used - I had one in Windows XP but not in Linux that did the side by side. -- You are receiving this mail because: You are on the CC list for the bug.
https://bugzilla.suse.com/show_bug.cgi?id=1222186 https://bugzilla.suse.com/show_bug.cgi?id=1222186#c26 --- Comment #26 from Javier de San Pedro <javispedro@gmail.com> --- (In reply to Javier de San Pedro from comment #20)
I would be submitting a request, but I can't get OBS to cooperate today (it fails to publish my packages due to requiring a SSL certificate, the first time I see this).
I managed to submit this request at the end. The fix should be in Tumbleweed in a couple of days. -- You are receiving this mail because: You are on the CC list for the bug.
https://bugzilla.suse.com/show_bug.cgi?id=1222186 https://bugzilla.suse.com/show_bug.cgi?id=1222186#c27 --- Comment #27 from T Adams <timothyadams@ymail.com> --- I believe that Javier's fix arrived in the 20240402 snapshot. Both of my scanners work under VB in the Windows 7 VM. If no one objects, I will mark this bug as resolved tomorrow, 4/5. Thanks very much to everyone to helped troubleshoot this issue! -- You are receiving this mail because: You are on the CC list for the bug.
participants (1)
-
bugzilla_noreply＠suse.com