-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On 02/24/2012 09:34 AM, Bob Goodwin wrote:
On 24/02/12 08:50, Michael Schwendt wrote:
> On Fri, 24 Feb 2012 07:16:43 -0500, BG (Bob) wrote:
>
>> [bobg@box6 ~]$ getfacl /dev/bus/usb/001/006 getfacl: Removing
>> leading '/' from absolute path names # file:
>> dev/bus/usb/001/006 # owner: root # group: root user::rw-
>> group::rw- other::r--
> The user access ACL entry is missing. That explains why your
> ordinary user cannot access the device. (I assume that udev and
> systemd work fine on your machine, or have you noticed issues
> that might be relevant?)
>
>> Do I need to chown bobg here? It looks like it ought to work
>> as is for bobg with 664 ownership?
> That won't survive a reboot, and when removing+readding the
> device the problem would reappear.
>
> Do you run with SELinux enabled and enforcing?
Yes
> Do you get denials in /var/log/audit/audit.log? (it could be that
> XFCE doesn't run the SELinux troubleshooter, so you would not
> learn about SELinux problems)
I don't get any SELinux warnings but then I don't know if that
function is working either. The log data is overwhelming! I see
nothing that seems to pertain to "sane." But I could have missed it
... I tried checking the end of the log immediately after xsane
errored, saw nothing I recognized as a problem, but would I?
> What happens if you switch to "permissive mode" temporarily
> (either at boot time) or by running "setenforce 0" as root, then
> plug in the scanner?
>
Did that, unplug scanner, run setenforce 0, plug in scanner and try
"xsane" again, same error, device not available. Is there a command
to verify it's actually switched to permissive? There's so much to
know!
Is there something I need to enable under "Users and Groups"
possibly? I looked there but didn't see anything I recognized as
applicable?
Bob
getenforce
I doubt there is a SELinux problem if this a happens in permissive mode.
ausearch -m avc -ts recent
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
Comment: Using GnuPG with Mozilla -
http://enigmail.mozdev.org/
iEYEARECAAYFAk9HrZkACgkQrlYvE4MpobP2lgCfVTm5olovP3YKQKScW3ESIx0V
qDcAnjI6c8+p1udWreC5IjIwuqL/MWe/
=JS0w
-----END PGP SIGNATURE-----