FEDORA-2019-d4c4bf697a — enhancement update for usbguard

usbguard-0.7.6-6.fc31

FEDORA-2019-d4c4bf697a created by rsroka 2 years ago for Fedora 31

stable

USBGuard enhancement and bugfix update:

Rebase to 0.7.6
Added Selinux sub-package
Fix for DAC_OVERRIDE -> there is no need to use this capability anymore
Fix for permanent device policy changes
Fixed incorrect daemon signal handling
Removed qt-applet and GUI

How to install

sudo dnf upgrade --refresh --advisory=FEDORA-2019-d4c4bf697a

This update has been submitted for testing by rsroka.

2 years ago

This update's test gating status has been changed to 'waiting'.

2 years ago

This update's test gating status has been changed to 'ignored'.

2 years ago

rsroka edited this update.

2 years ago

rsroka edited this update.

2 years ago

rsroka edited this update.

2 years ago

rsroka edited this update.

2 years ago

rsroka edited this update.

2 years ago

This update has been pushed to testing.

2 years ago

rathann commented & provided feedback 2 years ago

karma

The update is not installable:

$ sudo dnf --enablerepo=updates-testing update usbguard\*
Dependencies resolved.

 Problem: usbguard-0.7.2-8.fc31.i686 has inferior architecture
  - package usbguard-applet-qt-0.7.2-8.fc31.x86_64 requires usbguard = 0.7.2-8.fc31, but none of the providers can be installed
  - cannot install both usbguard-0.7.6-4.fc31.x86_64 and usbguard-0.7.2-8.fc31.x86_64
  - cannot install both usbguard-0.7.2-8.fc31.x86_64 and usbguard-0.7.6-4.fc31.x86_64
  - cannot install the best update candidate for package usbguard-applet-qt-0.7.2-8.fc31.x86_64
  - cannot install the best update candidate for package usbguard-0.7.2-8.fc31.x86_64
========================================================================================================================
 Package                   Architecture            Version                       Repository                        Size
========================================================================================================================
Skipping packages with conflicts:
(add '--best --allowerasing' to command line to force their upgrade):
 usbguard                  x86_64                  0.7.6-4.fc31                  updates-testing                  549 k

Transaction Summary
========================================================================================================================
Skip  1 Package

Nothing to do.
Complete!

You should add Obsoletes: usbguard-applet-qt < 0.7.6-4 to the spec file.

Bodhi is disabling automatic push to stable due to negative karma. The maintainer may push manually if they determine that the issue is not severe.

2 years ago

rsroka edited this update.

New build(s):

usbguard-0.7.6-5.fc31

Removed build(s):

usbguard-0.7.6-4.fc31

Karma has been reset.

2 years ago

This update has been submitted for testing by rsroka.

2 years ago

rsroka commented & provided feedback 2 years ago

I have provided a new build. The update should work.

This update has been pushed to testing.

2 years ago

jmbegley commented & provided feedback 2 years ago

karma

selinux prevents this package from running: SELinux is preventing (d-daemon) from mounton access on the directory /run/systemd/unit-root/etc/usbguard

This update can be pushed to stable now if the maintainer wishes

2 years ago

rsroka edited this update.

New build(s):

usbguard-0.7.6-6.fc31

Removed build(s):

usbguard-0.7.6-5.fc31

Karma has been reset.

2 years ago

This update has been submitted for testing by rsroka.

2 years ago

jmbegley commented & provided feedback 2 years ago

karma

SELinux issues appear to be resolved.

This update has been pushed to testing.

2 years ago

genodeftest commented & provided feedback 2 years ago

karma

Causes usbguard to fail to detect any usb path on 2 of my computers. If I use(d) a USB mouse and keyboard, this update completely locks me out of my computer forever (external changes from another linux system required).

GUI is missing, so "Test Case usbguard GUI" cannot work.

Test Case usbguard GUI

genodeftest commented & provided feedback 2 years ago

karma

For my previous comment, see https://github.com/USBGuard/usbguard/issues/279.

Test Case usbguard GUI

This update's test gating status has been changed to 'greenwave_failed'.

2 years ago

This update's test gating status has been changed to 'ignored'.

2 years ago

This update can be pushed to stable now if the maintainer wishes

2 years ago

rsroka commented & provided feedback 2 years ago

GUI is obsolete, I should remove it from the test cases.

Is your problem caused really because of unresolved realpath for /sys ? Does regen of your rules.conf help? There are a few new attributes in rules language and that can affect how the computed hash looks like. If you are not using any hash or parent hash in your rules.conf you should be safe but you should try to regen your rules anyway.