FEDORA-2019-d4c4bf697a created by rsroka 10 months ago for Fedora 31
stable

USBGuard enhancement and bugfix update:

  • Rebase to 0.7.6
  • Added Selinux sub-package
  • Fix for DAC_OVERRIDE -> there is no need to use this capability anymore
  • Fix for permanent device policy changes
  • Fixed incorrect daemon signal handling
  • Removed qt-applet and GUI

How to install

sudo dnf upgrade --advisory=FEDORA-2019-d4c4bf697a

This update has been submitted for testing by rsroka.

10 months ago

This update's test gating status has been changed to 'waiting'.

10 months ago

This update's test gating status has been changed to 'ignored'.

10 months ago

rsroka edited this update.

10 months ago

rsroka edited this update.

10 months ago

rsroka edited this update.

10 months ago

rsroka edited this update.

10 months ago

rsroka edited this update.

10 months ago

This update has been pushed to testing.

10 months ago
User Icon rathann commented & provided feedback 10 months ago
karma

The update is not installable:

$ sudo dnf --enablerepo=updates-testing update usbguard\*
Dependencies resolved.

 Problem: usbguard-0.7.2-8.fc31.i686 has inferior architecture
  - package usbguard-applet-qt-0.7.2-8.fc31.x86_64 requires usbguard = 0.7.2-8.fc31, but none of the providers can be installed
  - cannot install both usbguard-0.7.6-4.fc31.x86_64 and usbguard-0.7.2-8.fc31.x86_64
  - cannot install both usbguard-0.7.2-8.fc31.x86_64 and usbguard-0.7.6-4.fc31.x86_64
  - cannot install the best update candidate for package usbguard-applet-qt-0.7.2-8.fc31.x86_64
  - cannot install the best update candidate for package usbguard-0.7.2-8.fc31.x86_64
========================================================================================================================
 Package                   Architecture            Version                       Repository                        Size
========================================================================================================================
Skipping packages with conflicts:
(add '--best --allowerasing' to command line to force their upgrade):
 usbguard                  x86_64                  0.7.6-4.fc31                  updates-testing                  549 k

Transaction Summary
========================================================================================================================
Skip  1 Package

Nothing to do.
Complete!

You should add Obsoletes: usbguard-applet-qt < 0.7.6-4 to the spec file.

Bodhi is disabling automatic push to stable due to negative karma. The maintainer may push manually if they determine that the issue is not severe.

10 months ago

rsroka edited this update.

New build(s):

  • usbguard-0.7.6-5.fc31

Removed build(s):

  • usbguard-0.7.6-4.fc31

Karma has been reset.

9 months ago

This update has been submitted for testing by rsroka.

9 months ago
User Icon rsroka commented & provided feedback 9 months ago

I have provided a new build. The update should work.

This update has been pushed to testing.

9 months ago
User Icon jmbegley commented & provided feedback 9 months ago
karma

selinux prevents this package from running: SELinux is preventing (d-daemon) from mounton access on the directory /run/systemd/unit-root/etc/usbguard

This update can be pushed to stable now if the maintainer wishes

9 months ago

rsroka edited this update.

New build(s):

  • usbguard-0.7.6-6.fc31

Removed build(s):

  • usbguard-0.7.6-5.fc31

Karma has been reset.

9 months ago

This update has been submitted for testing by rsroka.

9 months ago
User Icon jmbegley commented & provided feedback 9 months ago
karma

SELinux issues appear to be resolved.

This update has been pushed to testing.

9 months ago
User Icon genodeftest commented & provided feedback 9 months ago
karma

Causes usbguard to fail to detect any usb path on 2 of my computers. If I use(d) a USB mouse and keyboard, this update completely locks me out of my computer forever (external changes from another linux system required).

GUI is missing, so "Test Case usbguard GUI" cannot work.

Test Case usbguard GUI
User Icon genodeftest commented & provided feedback 9 months ago
karma
Test Case usbguard GUI

This update's test gating status has been changed to 'greenwave_failed'.

9 months ago

This update's test gating status has been changed to 'ignored'.

9 months ago

This update can be pushed to stable now if the maintainer wishes

9 months ago
User Icon rsroka commented & provided feedback 9 months ago

GUI is obsolete, I should remove it from the test cases.

Is your problem caused really because of unresolved realpath for /sys ? Does regen of your rules.conf help? There are a few new attributes in rules language and that can affect how the computed hash looks like. If you are not using any hash or parent hash in your rules.conf you should be safe but you should try to regen your rules anyway.

User Icon jcerny commented & provided feedback 8 months ago
karma

The basic features s.a. allowing devices, blocking devices and listing devices work for me.

This update's test gating status has been changed to 'greenwave_failed'.

8 months ago

This update's test gating status has been changed to 'ignored'.

8 months ago
User Icon pkoncity commented & provided feedback 8 months ago
karma

Features like list-devices,reject devices work great and also allowing and blocking devices work well.

BZ#1751861 usbguard shuts down or hangs after idle time with screen locked
BZ#1776357 Permission inconsistency due to libqb
Test Case usbguard GUI
Test Case usbguard setup
User Icon alakatos provided feedback 8 months ago
karma
BZ#1751861 usbguard shuts down or hangs after idle time with screen locked
BZ#1776357 Permission inconsistency due to libqb
Test Case usbguard GUI
Test Case usbguard setup

This update has been submitted for stable by rsroka.

8 months ago

This update has been pushed to stable.

8 months ago

Please login to add feedback.

Metadata
Type
enhancement
Karma
3
Signed
Content Type
RPM
Test Gating
Settings
Unstable by Karma
-3
Stable by Karma
disabled
Stable by Time
disabled
Dates
submitted
10 months ago
in testing
9 months ago
in stable
8 months ago
modified
9 months ago
BZ#1751861 usbguard shuts down or hangs after idle time with screen locked
0
2
BZ#1776357 Permission inconsistency due to libqb
0
2

Automated Test Results

Test Cases

0 2 Test Case usbguard CLI devices
0 2 Test Case usbguard CLI rules
-1 2 Test Case usbguard GUI
0 2 Test Case usbguard setup